Alphaportal MCP

Name: Alphaportal MCP
Author: chrischall

by chrischallversion 1.3.0i★ 0iRuns on your computer

Registry nameio.github.chrischall/alphaportal-mcp

Install

Overview

Description from the maker (original English)

AlphaPortal school-bus transportation for Claude — students, stops, live bus location, notifications

PopNx MCP’s three pillars

These three are never merged into one score: opinions, measurements and popularity are different things.

User voiceiNo reviews yetReviews open together with accounts in a later step
Our basic checksi2 of 2 passedChecked from public information; code not scanned yet
UsageiEarly↓ 379/wk · ★ 0

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

Connection: Runs on your computer
Transport: stdio
Category: Games, sports, food & learning
You need to fill in: ALPHAPORTAL_REFRESH_TOKEN

Install

Pick the AI app you use, then copy the settings.

Before you install

Basic checks: 2 of 2 passed
Runs on your computer with your user’s permissions (files, network, apps).
You fill in yourself: ALPHAPORTAL_REFRESH_TOKEN, ALPHAPORTAL_DISABLE_FETCHPROXY, ALPHAPORTAL_SESSION_FILE, FETCHPROXY_WS_PORT, FETCHPROXY_WS_HOST, FETCHPROXY_IDENTITY_DIR

Values marked secret are keys to your account. Never share them or paste them into a chat.

You need

npmNode.js installed (for the npx command)

Which app do you use?

ClaudeClaude CodeCursorVS CodeChatGPT

Pick your app above. We remember it, so next time the button says “Install in …”.

Open Claude Desktop → Settings → Developer → Edit Config, and paste this into claude_desktop_config.json

{
  "mcpServers": {
    "alphaportal": {
      "command": "npx",
      "args": [
        "-y",
        "alphaportal-mcp"
      ],
      "env": {
        "ALPHAPORTAL_REFRESH_TOKEN": "your-value",
        "ALPHAPORTAL_DISABLE_FETCHPROXY": "your-value",
        "ALPHAPORTAL_SESSION_FILE": "your-value",
        "FETCHPROXY_WS_PORT": "your-value",
        "FETCHPROXY_WS_HOST": "your-value",
        "FETCHPROXY_IDENTITY_DIR": "your-value"
      }
    }
  }
}

Run this in your terminal

claude mcp add alphaportal --env ALPHAPORTAL_REFRESH_TOKEN=your-value --env ALPHAPORTAL_DISABLE_FETCHPROXY=your-value --env ALPHAPORTAL_SESSION_FILE=your-value --env FETCHPROXY_WS_PORT=your-value --env FETCHPROXY_WS_HOST=your-value --env FETCHPROXY_IDENTITY_DIR=your-value -- npx -y alphaportal-mcp

Fill in the empty values before running it.

Open in Cursor

Or copy the settings yourself

Paste into .cursor/mcp.json in your project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "alphaportal": {
      "command": "npx",
      "args": [
        "-y",
        "alphaportal-mcp"
      ],
      "env": {
        "ALPHAPORTAL_REFRESH_TOKEN": "your-value",
        "ALPHAPORTAL_DISABLE_FETCHPROXY": "your-value",
        "ALPHAPORTAL_SESSION_FILE": "your-value",
        "FETCHPROXY_WS_PORT": "your-value",
        "FETCHPROXY_WS_HOST": "your-value",
        "FETCHPROXY_IDENTITY_DIR": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

Open in VS Code

Or copy the settings yourself

Paste into .vscode/mcp.json in your project

{
  "servers": {
    "alphaportal": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "alphaportal-mcp"
      ],
      "env": {
        "ALPHAPORTAL_REFRESH_TOKEN": "your-value",
        "ALPHAPORTAL_DISABLE_FETCHPROXY": "your-value",
        "ALPHAPORTAL_SESSION_FILE": "your-value",
        "FETCHPROXY_WS_PORT": "your-value",
        "FETCHPROXY_WS_HOST": "your-value",
        "FETCHPROXY_IDENTITY_DIR": "your-value"
      }
    }
  }
}

Your browser asks to open the app, then the app shows the settings and asks you to confirm. Key values are left empty for you to fill in.

This one runs on your computer, and ChatGPT can only connect to servers on the internet. Pick another app.

Your choice stays on this device in a cookie; no account needed.

Values you fill in

ALPHAPORTAL_REFRESH_TOKEN secret env
Optional refresh token; if unset, read from a signed-in tab via the ContextMint Bridge extension
ALPHAPORTAL_DISABLE_FETCHPROXY env
Set to `1` to disable the browser-bridge fallback and require ALPHAPORTAL_REFRESH_TOKEN.
ALPHAPORTAL_SESSION_FILE env
Override the session store path (default `~/.alphaportal-mcp/session.json`).
FETCHPROXY_WS_PORT env
Localhost concentrator port (default 37149). On one machine every MCP shares the concentrator, so move it for ALL of them or not at all.
FETCHPROXY_WS_HOST env
Bind interface (default 127.0.0.1; a literal IP only, anything else is ignored). Keep on loopback — it exists for ONE topology: a hosted child in its own network namespace.
FETCHPROXY_IDENTITY_DIR env
Where to store the long-term fetchproxy identity keypair (default ~/.fetchproxy/identity/; an absolute path only, anything else is ignored). Exists for a host that runs a separate child per caller, s…

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

Which apps can use it

Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.

Run on your computer in

Claude Goose LM Studio Msty Studio Cherry Studio Cursor VS Code + GitHub Copilot Visual Studio Windsurf (Devin Desktop)Zed Kiro Cline Continue JetBrains AI Assistant Claude Code Codex CLI Gemini CLI OpenCode nodecode Warp LibreChat Raycast

All apps, with pros and cons →

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 11, 2026

✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account chrischall, which owns the repo
✓ Pass
Still maintained
Code last changed yesterday
… Not checked yet
Has a licence
We have not read this repo from GitHub yet
– Not applicable
Endpoint responds
This one runs on your computer; there is no internet endpoint
– Not applicable
Sign-in with OAuth
Runs on your computer and uses local settings instead
… Not checked yet
No hidden instructions in tool descriptions
Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Games, sports, food & learningi

More stars than 0% of the other 1360 servers in this category
Published to the registry more recently than 82% of the other 1360 servers in this category
Basic checks equal to or better than 100% of the other 1360 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Common questions

Is Alphaportal MCP safe?

It passed 2 of 2 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.

What keys or codes does it need?

You need to fill in: ALPHAPORTAL_REFRESH_TOKEN

Does it run on my computer or in the cloud?

It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).

Is it still maintained?

The GitHub repo last changed yesterday, and the latest version (1.3.0) reached the registry 6 days ago.

Which apps can use it?

Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.

What can I use instead?

In the same category: Honcho, ShipSwift, Pm Claude Skills

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

Honcho

Memory that reasons: continual learning for stateful agents. Better context, fewer tokens.

by plastic-labsWidely used★ 8.1KUpdated 3 months ago

Runs in the cloud

Install

ShipSwift

40+ production-ready SwiftUI recipes for building full-stack iOS apps via MCP.

by signerlabsWidely used★ 3.3KUpdated 9 months ago

Runs in the cloud

Install

Pm Claude Skills

1310 professional Agent Skills + workflow recipes — searchable & fetchable over MCP.

by mohitagw15856Widely used↓ 2.5K/wk★ 1.5KUpdated 18 days ago

Runs on your computer

Install

README from the maker

Open the README

Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.

alphaportal-mcp

An MCP server for AlphaPortal (AlphaRoute), the parent/guardian school-bus transportation portal used by districts such as Charlotte-Mecklenburg Schools (cmsnc.alphaportal.app). Ask Claude where your child's bus is, what stops they have, and what arrival notifications came in — and (confirm-gated) adjust notification preferences and walk-zone radius.

Developed and maintained by AI. Use at your own discretion.

What it can do

Reads (all live-verified against the real API):

alphaportal_list_students — your children, with grade, school, and transport flags
alphaportal_get_student — a child's school plus morning/afternoon stops
alphaportal_get_student_stops — assigned stops with times and locations
alphaportal_get_bus_location — live GPS of the bus for the AM or PM run
alphaportal_list_notifications — arrival/departure alerts (view: "brief" for one line per alert)
alphaportal_list_requests — submitted transportation requests + tracking numbers
alphaportal_get_report_link — a PDF report download link
alphaportal_list_schools, alphaportal_list_grades — district reference data
alphaportal_get_profile, alphaportal_get_account, alphaportal_get_settings
alphaportal_session_status — is a working session configured (no secrets returned)
alphaportal_healthcheck — which hop is broken: no refresh token resolved, AlphaPortal rejected it, a CDN/WAF blocked the request, or the API is down (no secrets returned)

Writes (each asks you to confirm first — a confirmation prompt where the client supports one; otherwise the first call returns a preview of the exact payload plus a confirmToken, and only a repeat call with that token proceeds; see Confirmations):

alphaportal_edit_walk_radius — set a student's walk-zone radius (meters)
alphaportal_set_notification — set per-student push/email notification preferences

Authentication — the refresh token

AlphaPortal's login is reCAPTCHA-gated and can't be automated with a username/password. Instead this server uses the refresh token the web app stores in your signed-in browser (an 8-day credential); from it, it mints the short-lived access tokens it needs entirely server-side — no browser bridge in the request hot path. There are two ways it gets that token, tried in order:

Automatic (fetchproxy bootstrap). If ALPHAPORTAL_REFRESH_TOKEN is not set, the server reads it once from your signed-in AlphaPortal tab via the ContextMint Bridge browser extension (formerly the fetchproxy extension) — a one-shot read that snapshots only the token (a JSON-pointer extraction, so your name/ email/phone never leave the browser), then closes. Requires the extension installed and a signed-in *.alphaportal.app tab. Get ContextMint Bridge from its releases page: in Chrome, unzip the chrome build and load it unpacked (chrome://extensions → Developer mode → Load unpacked). Safari isn't available yet (it will ship inside the ContextMint app, which has no public download), so use Chrome for now. ContextMint Bridge is the fetchproxy browser extension under its new name, from the same maintainer — fetchproxy's own README points to it. Its source is public at https://github.com/nullnet-app/contextmint-bridge: build it yourself, or check a release zip against the .sha256 file published beside it (shasum -a 256 -c contextmint-bridge-chrome- .zip.sha256). Set ALPHAPORTAL_DISABLE_FETCHPROXY=1 to turn this off.
Manual (env var). Set ALPHAPORTAL_REFRESH_TOKEN yourself. Capture it in a signed-in tab's DevTools console:

   JSON.parse(localStorage.user).User.RefreshToken

This is the right path for a headless/hosted deployment with no browser.

Either way, the server persists each rotated refresh token, so the 8-day window rolls forward as long as you use it at least once every 8 days. If it expires, sign back in (path 1) or re-capture (path 2). The alphaportal-fpx skill under skills/ documents the same capture from a shell via the fpx CLI.

Keeping the stored token safe

The saved session (~/.alphaportal-mcp/session.json, or ALPHAPORTAL_SESSION_FILE) holds the refresh token in plaintext JSON — the file is 0600 in a 0700 directory, but it is not in an OS keychain. Treat it like a password:

Anyone who copies it once can keep refreshing indefinitely. AlphaPortal validates the token statelessly (signature + expiry), so a used token keeps working until it expires, and every refresh mints a new 8-day one. A copy — from a backup, a synced home directory, or another process running as you — gives ongoing access to your children's names, schools, home stop locations and live bus GPS.
You cannot revoke it from here. Deleting the file stops *this* server using it, not a copy, which stays valid until it expires. Whether an AlphaPortal password change invalidates outstanding tokens is unverified; if you suspect a copy leaked, change your password and ask the district to reset your portal account.
Keep ~/.alphaportal-mcp/ out of cloud-synced folders and unencrypted backups, and delete it when you stop using the server.

Setup

npm install

npm run build echo 'ALPHAPORTAL_REFRESH_TOKEN= ' > .env node dist/index.js # or wire it into your MCP host

.env is gitignored. For an MCP host, set ALPHAPORTAL_REFRESH_TOKEN in its env block (.mcp.json / mcpb user config both reference it).

Optional environment variables

Variable	Purpose
`ALPHAPORTAL_REFRESH_TOKEN`	The refresh token. Optional if ContextMint Bridge can read it from a signed-in tab; required for a headless/hosted deployment.
`ALPHAPORTAL_DISABLE_FETCHPROXY`	Set to `1` to disable the browser-bridge fallback and require the env var.
`ALPHAPORTAL_SESSION_FILE`	Override the store path (default `~/.alphaportal-mcp/session.json`).

Confirmations

Variable	Default	Purpose
`MCP_CONFIRM_MODE`	`ask-user`	What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). `ask-user`: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. `auto`: the same two steps, but the model may use the token after reviewing the preview itself. `refuse`: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt, unless `MCP_CONFIRM_ELICITATION=off`. An unrecognised value is treated as `refuse`.
`MCP_CONFIRM_ELICITATION`	`on`	`off` never shows a confirmation prompt, so every client gets the `MCP_CONFIRM_MODE` path. Set it for a client that claims to support prompts but never shows one (the write hangs — opencode 2.0.x). Any other value stays `on`, with a warning on stderr.
`MCP_CONFIRM_TTL_SECONDS`	`600`	How long a token stays valid.
`MCP_CONFIRM_SECRET`	random per process	Signing key; set it only if tokens must survive a server restart.

Hosting on mcp-host

mint.yaml describes how to host this server. Note the egress allowlist: the only host the server contacts is api.alpharoute.app (every read/write and the token refresh). On the isolated tier an egress policy is required — allow api.alpharoute.app, or tools report "could not reach the API". A plain hosted registration has no browser bridge, so set ALPHAPORTAL_REFRESH_TOKEN as a secret there.

Development

npm test          # vitest (mocked network)

npm run typecheck # tsc --noEmit (a green vitest run is not a green typecheck) npm run build # tsc + esbuild bundle

API shapes are pinned in docs/ALPHAPORTAL-API.md.

Notes & limitations

The transportation-request submission flow (requests/transportation/add, .../alternative/add) is intentionally not exposed yet — its nested request body was not fully captured, and shipping a guessed write payload that submits a real request to the district would be irresponsible. See the docs.
Every request rides your own AlphaPortal session (the refresh token you captured); the server only ever reads your account's data.

Alphaportal MCP

Overview

PopNx MCP’s three pillars

What you can do with it

Install

Before you install

Values you fill in

Which apps can use it

What it can do

Basic checksi

Maker matches the repo

Still maintained

Has a licence

Endpoint responds

Sign-in with OAuth

No hidden instructions in tool descriptions

Compared with others in Games, sports, food & learningi

Common questions

Alternatives

Honcho

ShipSwift

Pm Claude Skills

README from the maker

alphaportal-mcp

What it can do

Authentication — the refresh token

Keeping the stored token safe

Setup

Optional environment variables

Confirmations

Hosting on mcp-host

Development

Notes & limitations