プロトタイプ · プレビュー版:公式レジストリのすべてのサーバーを掲載し、30分ごとに同期しています。レビューとアカウント機能は今後のステップで始まります。
PopNx MCPAIを使う人のためのMCPサーバー · やさしい言葉で解説

trvl

作者:MikkoParkkolaバージョン 1.27.0i★ –iパソコンで動く
レジストリ名io.github.MikkoParkkola/trvl

インストール

概要

作者による説明(英語の原文)

Door-to-door travel MCP + CLI: flights, hotels, trains, cars, ferries. No API keys, Go binary.

PopNx MCPの3つの柱

この3つを1つのスコアにまとめることはしません。意見、測定、人気はそれぞれ別のものだからです。

できること

このサーバーのやさしい解説はまだ書いていません。以下はレジストリから読み取った事実です。

  • 接続方法: パソコンで動く
  • トランスポート: stdio
  • カテゴリ: 旅行・地図・天気
  • 入力が必要なもの:TRVL_MCP_TOKEN, TRVL_MCP_READ_TOKEN, TRVL_MCP_WRITE_TOKEN, TRVL_MCP_OAUTH_CLIENT_SECRET, AFKLM_KEY, AFKL_KLM_COOKIES, SERPAPI_KEY, TRAVELPAYOUTS_TOKEN, TRANSAVIA_API_KEY, TICKETMASTER_API_KEY, FOURSQUARE_API_KEY, OPENTRIPMAP_API_KEY, GEOAPIFY_API_KEY, DISTRIBUSION_API_KEY, SKYSCANNER_API_KEY

インストール

使っているAIアプリを選んで、設定をコピーしてください。

インストールの前に

  • 基本チェック:1項目中1項目に合格
  • あなたのパソコンで、あなたのユーザーと同じ権限(ファイル、ネットワーク、アプリ)で動きます。
  • 自分で入力するもの: TRVL_MCP_TOKEN, TRVL_MCP_READ_TOKEN, TRVL_MCP_WRITE_TOKEN, TRVL_MCP_OAUTH_INTROSPECTION_URL, TRVL_MCP_OAUTH_CLIENT_ID, TRVL_MCP_OAUTH_CLIENT_SECRET, TRVL_MCP_OAUTH_AUDIENCE, TRVL_MCP_TOOL_MODE, TRVL_MCP_TOOL_TIMEOUT, AFKLM_KEY, AFKLM_OP_REF, AFKLM_KEYCHAIN_SERVICE, AFKL_KLM_COOKIES, SERPAPI_KEY, TRAVELPAYOUTS_TOKEN, TRANSAVIA_API_KEY, TICKETMASTER_API_KEY, FOURSQUARE_API_KEY, OPENTRIPMAP_API_KEY, GEOAPIFY_API_KEY, DISTRIBUSION_API_KEY, SKYSCANNER_API_KEY

「秘密」と表示された値は、あなたのアカウントの鍵です。絶対に人に教えたり、チャットに貼り付けたりしないでください。

必要なもの

  • npmNode.jsのインストール(npxコマンドに必要)

どのアプリを使っていますか?

上でアプリを選んでください。選んだアプリを覚えておくので、次からはボタンに「…にインストール」と表示されます。

Claude Desktop → Settings → Developer → Edit Config を開き、claude_desktop_config.json にこれを貼り付けます

{
  "mcpServers": {
    "trvl": {
      "command": "npx",
      "args": [
        "-y",
        "trvl-mcp"
      ],
      "env": {
        "TRVL_MCP_TOKEN": "your-value",
        "TRVL_MCP_READ_TOKEN": "your-value",
        "TRVL_MCP_WRITE_TOKEN": "your-value",
        "TRVL_MCP_OAUTH_INTROSPECTION_URL": "your-value",
        "TRVL_MCP_OAUTH_CLIENT_ID": "your-value",
        "TRVL_MCP_OAUTH_CLIENT_SECRET": "your-value",
        "TRVL_MCP_OAUTH_AUDIENCE": "your-value",
        "TRVL_MCP_TOOL_MODE": "your-value",
        "TRVL_MCP_TOOL_TIMEOUT": "your-value",
        "AFKLM_KEY": "your-value",
        "AFKLM_OP_REF": "your-value",
        "AFKLM_KEYCHAIN_SERVICE": "your-value",
        "AFKL_KLM_COOKIES": "your-value",
        "SERPAPI_KEY": "your-value",
        "TRAVELPAYOUTS_TOKEN": "your-value",
        "TRANSAVIA_API_KEY": "your-value",
        "TICKETMASTER_API_KEY": "your-value",
        "FOURSQUARE_API_KEY": "your-value",
        "OPENTRIPMAP_API_KEY": "your-value",
        "GEOAPIFY_API_KEY": "your-value",
        "DISTRIBUSION_API_KEY": "your-value",
        "SKYSCANNER_API_KEY": "your-value"
      }
    }
  }
}

ターミナルでこれを実行します

claude mcp add trvl --env TRVL_MCP_TOKEN=your-value --env TRVL_MCP_READ_TOKEN=your-value --env TRVL_MCP_WRITE_TOKEN=your-value --env TRVL_MCP_OAUTH_INTROSPECTION_URL=your-value --env TRVL_MCP_OAUTH_CLIENT_ID=your-value --env TRVL_MCP_OAUTH_CLIENT_SECRET=your-value --env TRVL_MCP_OAUTH_AUDIENCE=your-value --env TRVL_MCP_TOOL_MODE=your-value --env TRVL_MCP_TOOL_TIMEOUT=your-value --env AFKLM_KEY=your-value --env AFKLM_OP_REF=your-value --env AFKLM_KEYCHAIN_SERVICE=your-value --env AFKL_KLM_COOKIES=your-value --env SERPAPI_KEY=your-value --env TRAVELPAYOUTS_TOKEN=your-value --env TRANSAVIA_API_KEY=your-value --env TICKETMASTER_API_KEY=your-value --env FOURSQUARE_API_KEY=your-value --env OPENTRIPMAP_API_KEY=your-value --env GEOAPIFY_API_KEY=your-value --env DISTRIBUSION_API_KEY=your-value --env SKYSCANNER_API_KEY=your-value -- npx -y trvl-mcp

動かす前に、空欄の値を入力してください。

Cursorで開く

または、設定を自分でコピーする

プロジェクトの .cursor/mcp.json、または ~/.cursor/mcp.json に貼り付けます

{
  "mcpServers": {
    "trvl": {
      "command": "npx",
      "args": [
        "-y",
        "trvl-mcp"
      ],
      "env": {
        "TRVL_MCP_TOKEN": "your-value",
        "TRVL_MCP_READ_TOKEN": "your-value",
        "TRVL_MCP_WRITE_TOKEN": "your-value",
        "TRVL_MCP_OAUTH_INTROSPECTION_URL": "your-value",
        "TRVL_MCP_OAUTH_CLIENT_ID": "your-value",
        "TRVL_MCP_OAUTH_CLIENT_SECRET": "your-value",
        "TRVL_MCP_OAUTH_AUDIENCE": "your-value",
        "TRVL_MCP_TOOL_MODE": "your-value",
        "TRVL_MCP_TOOL_TIMEOUT": "your-value",
        "AFKLM_KEY": "your-value",
        "AFKLM_OP_REF": "your-value",
        "AFKLM_KEYCHAIN_SERVICE": "your-value",
        "AFKL_KLM_COOKIES": "your-value",
        "SERPAPI_KEY": "your-value",
        "TRAVELPAYOUTS_TOKEN": "your-value",
        "TRANSAVIA_API_KEY": "your-value",
        "TICKETMASTER_API_KEY": "your-value",
        "FOURSQUARE_API_KEY": "your-value",
        "OPENTRIPMAP_API_KEY": "your-value",
        "GEOAPIFY_API_KEY": "your-value",
        "DISTRIBUSION_API_KEY": "your-value",
        "SKYSCANNER_API_KEY": "your-value"
      }
    }
  }
}

ブラウザがアプリを開いてよいか確認し、そのあとアプリが設定を表示して確認を求めます。キーの値は空欄のままなので、自分で入力してください。

VS Codeで開く

または、設定を自分でコピーする

プロジェクトの .vscode/mcp.json に貼り付けます

{
  "servers": {
    "trvl": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "trvl-mcp"
      ],
      "env": {
        "TRVL_MCP_TOKEN": "your-value",
        "TRVL_MCP_READ_TOKEN": "your-value",
        "TRVL_MCP_WRITE_TOKEN": "your-value",
        "TRVL_MCP_OAUTH_INTROSPECTION_URL": "your-value",
        "TRVL_MCP_OAUTH_CLIENT_ID": "your-value",
        "TRVL_MCP_OAUTH_CLIENT_SECRET": "your-value",
        "TRVL_MCP_OAUTH_AUDIENCE": "your-value",
        "TRVL_MCP_TOOL_MODE": "your-value",
        "TRVL_MCP_TOOL_TIMEOUT": "your-value",
        "AFKLM_KEY": "your-value",
        "AFKLM_OP_REF": "your-value",
        "AFKLM_KEYCHAIN_SERVICE": "your-value",
        "AFKL_KLM_COOKIES": "your-value",
        "SERPAPI_KEY": "your-value",
        "TRAVELPAYOUTS_TOKEN": "your-value",
        "TRANSAVIA_API_KEY": "your-value",
        "TICKETMASTER_API_KEY": "your-value",
        "FOURSQUARE_API_KEY": "your-value",
        "OPENTRIPMAP_API_KEY": "your-value",
        "GEOAPIFY_API_KEY": "your-value",
        "DISTRIBUSION_API_KEY": "your-value",
        "SKYSCANNER_API_KEY": "your-value"
      }
    }
  }
}

ブラウザがアプリを開いてよいか確認し、そのあとアプリが設定を表示して確認を求めます。キーの値は空欄のままなので、自分で入力してください。

これはパソコンで動くサーバーですが、ChatGPTがつなげるのはインターネット上のサーバーだけです。ほかのアプリを選んでください。

選んだアプリは、この端末のCookieに保存されます。アカウントは不要です。

自分で入力する値

  • TRVL_MCP_TOKEN 秘密 env
    Bearer token for HTTP-mode auth (unused in stdio). Optional.
  • TRVL_MCP_READ_TOKEN 秘密 env
    Read-scoped bearer token for HTTP-mode auth (unused in stdio). Optional.
  • TRVL_MCP_WRITE_TOKEN 秘密 env
    Write-scoped bearer token for HTTP-mode auth (unused in stdio). Optional.
  • TRVL_MCP_OAUTH_INTROSPECTION_URL env
    OAuth token introspection endpoint for HTTP-mode auth (unused in stdio). Optional.
  • TRVL_MCP_OAUTH_CLIENT_ID env
    OAuth client ID for HTTP-mode token introspection (unused in stdio). Optional.
  • TRVL_MCP_OAUTH_CLIENT_SECRET 秘密 env
    OAuth client secret for HTTP-mode token introspection (unused in stdio). Optional.
  • TRVL_MCP_OAUTH_AUDIENCE env
    Expected OAuth audience for HTTP-mode token introspection (unused in stdio). Optional.
  • TRVL_MCP_TOOL_MODE env
    Selects which MCP tool set is registered (e.g. smart/full). Optional, defaults to full set.
  • TRVL_MCP_TOOL_TIMEOUT env
    Per-tool-call timeout override. Optional, defaults to the built-in timeout.
  • AFKLM_KEY 秘密 env
    Air France-KLM API key; unlocks that airline's live fares/award search. Optional, trvl works without it.
  • AFKLM_OP_REF env
    1Password reference for the Air France-KLM API key. Optional, alternative to AFKLM_KEY.
  • AFKLM_KEYCHAIN_SERVICE env
    macOS Keychain service name to read the Air France-KLM API key from. Optional, alternative to AFKLM_KEY.
  • AFKL_KLM_COOKIES 秘密 env
    Session cookies for Air France-KLM award search. Optional, unlocks award-fare lookups only.
  • SERPAPI_KEY 秘密 env
    SerpApi API key; unlocks search-engine-backed lookups used by some providers. Optional, trvl works without it.
  • TRAVELPAYOUTS_TOKEN 秘密 env
    Travelpayouts API token; unlocks that flight-price data source. Optional, trvl works without it.
  • TRANSAVIA_API_KEY 秘密 env
    Transavia API key; unlocks that airline's live fares. Optional, trvl works without it.
  • TICKETMASTER_API_KEY 秘密 env
    Ticketmaster API key; unlocks event listings for destinations. Optional, trvl works without it.
  • FOURSQUARE_API_KEY 秘密 env
    Foursquare API key; unlocks that place-search data source. Optional, trvl works without it.
  • OPENTRIPMAP_API_KEY 秘密 env
    OpenTripMap API key; unlocks that attractions data source. Optional, trvl works without it.
  • GEOAPIFY_API_KEY 秘密 env
    Geoapify API key; unlocks that places/geocoding data source. Optional, trvl works without it.
  • DISTRIBUSION_API_KEY 秘密 env
    Distribusion API key; unlocks that ground-transport data source. Optional, trvl works without it.
  • SKYSCANNER_API_KEY 秘密 env
    Skyscanner API key; unlocks that car-hire data source. Optional, trvl works without it.

この設定は、作者のレジストリ登録情報から作成しています。READMEと違う場合は、READMEに従ってください。

できること

パソコンで動くサーバーです。インストールすると、ツール一覧がAIアプリに表示されます。

基本チェックi

誰でも見られる情報をチェックしており、コードは読んでいません。当てはまらない項目は数に入れていません。 · 2026年11月8日にチェック

  • ✓ 合格

    作者とリポジトリが一致

    レジストリ名は、リポジトリを所有するGitHubアカウント MikkoParkkola で確認済みです

  • … 未チェック

    今もメンテナンスされている

    このリポジトリはまだGitHubから読み取っていません

  • … 未チェック

    ライセンスがある

    このリポジトリはまだGitHubから読み取っていません

  • – 対象外

    エンドポイントが応答する

    これはパソコンで動くため、インターネット上のエンドポイントはありません

  • – 対象外

    OAuthでサインイン

    パソコンで動き、代わりにローカルの設定を使います

  • … 未チェック

    ツールの説明に隠れた指示がない

    パソコンで動くサーバーです。ツール一覧を読み取れるのは、インターネット上のエンドポイントがある場合だけです

旅行・地図・天気のほかのサーバーとの比較i

  • このカテゴリのほかの1716件のうち0%よりスターが多い
  • このカテゴリのほかの1716件のうち52%より最近レジストリに公開
  • 基本チェックの結果が、このカテゴリのほかの1716件のうち100%と同じかそれ以上

レジストリでこのカテゴリにある有効なすべてのサーバーと比較しています。スターは、公開者がリポジトリの所有者である場合だけ数えます。

よくある質問

trvlは安全ですか?

当てはまる基本チェック1項目のうち1項目に合格しました。コードは読んでいません。キーやトークンを追加する前に、サーバーがどんなアクセスを求めているかを確認し、必要な権限だけを持つキーを使ってください。

どんなキーやコードが必要ですか?

入力が必要なもの:TRVL_MCP_TOKEN, TRVL_MCP_READ_TOKEN, TRVL_MCP_WRITE_TOKEN, TRVL_MCP_OAUTH_CLIENT_SECRET, AFKLM_KEY, AFKL_KLM_COOKIES, SERPAPI_KEY, TRAVELPAYOUTS_TOKEN, TRANSAVIA_API_KEY, TICKETMASTER_API_KEY, FOURSQUARE_API_KEY, OPENTRIPMAP_API_KEY, GEOAPIFY_API_KEY, DISTRIBUSION_API_KEY, SKYSCANNER_API_KEY

パソコンで動きますか、それともクラウドですか?

あなたのパソコンで動きます。必要なときにAIアプリが起動し、データは作者のサーバーを通りません(サーバー自体がオンラインサービスを呼び出す場合を除きます)。

今もメンテナンスされていますか?

GitHubリポジトリの最終更新は–、最新バージョン(1.27.0)がレジストリに届いたのは28 日前です。

どのアプリで使えますか?

Claude Desktop、Claude Code、Cursor、VS CodeなどのMCP対応アプリで使えます。パソコンにDocker, Node.jsも必要です。

代わりに使えるものは?

同じカテゴリには:Agro API MCP by usefulapi, FieldClimate MCP by usefulapi, Exely MCP by usefulapi

代わりの候補

同じカテゴリで、ほかの作者が作ったサーバー。スターの多い順。

カードの見方:★ GitHubスターi3つの柱:レビュー · チェック · 利用状況i更新=最新バージョンをレジストリに公開した日i

作者のREADME

READMEを開く

作者のリポジトリから書かれたとおりにコピーしたものです。PopNx MCPは内容を確認・推奨していません。HTML、画像、スクリプトは取り除いています。リンクはこのサイトの外へ移動します。

trvl — Real travel search for your AI assistant

Ask your AI assistant to plan a real trip, and it actually can. trvl gives Claude, Cursor, Windsurf, Codex, or any MCP-compatible client one smart tool — the travel router — with live access to flights, hotels, rental cars, trains, buses, ferries, price alerts, award sweet spots, weather, and destination intel. Free for noncommercial use, no personal API keys for default search, no signup. One binary.

You: I have €300 and a free weekend. Surprise me.

Illustrative response shape (prices are examples): Dubrovnik, Croatia 🇭🇷 — ✈️ Ryanair HEL→DBV €167 RT · 🏨 Old Town Studios 4.6★ €84 · 🌡️ 26°C, sunny.

📊 Naive €350 → optimized €251 → saved €99 (28%) by flying Friday and splitting airlines.

▶ Try it live, no install: socialistic.ai/trvl-travel-mcp (community-hosted).


How it works, in one paragraph

trvl is a single binary that runs on your machine. Your AI client talks to it over MCP; it queries flight, hotel, transport, weather, and places sources, then merges, de-duplicates and optimizes the results before handing back one answer. Most sources are free public endpoints, so there is nothing to sign up for. The ones behind bot protection may reuse the browser session you already have, which is the one thing worth reading about before you install: see What trvl reads, and what it keeps.

trvl speaks the two latest MCP revisions: 2026-07-28 and 2025-11-25. An initialize with no _meta is answered as 2025-11-25, whether the handshake names 2025-11-25 or 2026-07-28, and that answer includes ping and resources/subscribe. _meta of 2026-07-28 on an initialize selects the 2026 shape. A client that sends 2026-07-28 in _meta["io.modelcontextprotocol/protocolVersion"] on each request gets server/discover, resultType, cache hints on the list and read endpoints, and subscriptions/listen instead of resource subscribe. Any other _meta protocol version returns JSON-RPC -32022 with data.supported and data.requested. On HTTP the MCP-Protocol-Version header has to match that field; a 2026 header alone is -32020. A 2026 request must also send Mcp-Method (and Mcp-Name for tools/call, resources/read, and prompts/get).

Why trvl, not the alternatives

  • Whole journey, door to door. It plans the entire trip across modes — home to airport, flight, arrival transfer, hotel, onward train — and prices each leg in its real mode. Most tools stop at one flight, one hotel.
  • No personal API key for default search. There is no Amadeus key to apply for, subscription, or per-call bill on the default paths. Optional providers switch on when you supply their credentials; none is required for the default flight, hotel, or ground searches.
  • Your assistant, your machine. One local binary, any MCP client, not locked to a vendor. Searching sends the query to the providers being searched, the same as any travel site would: route, dates and traveller count go to Google, Kiwi, Booking and the rest. What trvl keeps for itself stays on your machine, apart from any webhook you configure yourself. A released build sends one daily heartbeat to https://telemetry.revaluator.ai/v1/heartbeat, and you can switch that off. TRVL_TELEMETRY_ENDPOINT replaces that URL. Both are spelled out below.
  • It optimizes, not just lists. Shift-day pricing, split-airline routing, hidden-city checks, award sweet spots, round-trip fares. It hands back the cheaper option and shows what it saved.
  • It is honest when a source fails. Typed statuses and labelled estimates, never an empty result dressed up as "nothing found."

Full head-to-head against Google Flights, KAYAK, Skyscanner, Kiwi, and other travel MCPs: docs/COMPARISON.md.

What it can do

AreaHighlightsReference
MCP tools1 smart travel router — a natural-language tool that advertises a single tool (~378 tokens) instead of a full per-domain list (~33,500 tokens): ~98.9% smaller tools/list footprint. Older clients that call legacy tool names still work (66 legacy-compatible capabilities).MCP-TOOLS-REFERENCE.md
FlightsGoogle Flights + Kiwi + Skiplagged merged; LCC fares, AFKLM award scan, round-trip (both legs)PROVIDERS.md
Ground22 train/bus/ferry providers across Europe, API-firstPROVIDERS.md
Hotels6 sources, discovery → verification trust modelPROVIDERS.md
Travel hacks36 parallel detectors (hidden-city, positioning, stopover, multimodal, error-fare…)PROVIDERS.md
CLIStandalone tool, 57 commands, table/JSON outputCLI.md
ProfileLearns home airports, FF status, luggage, preferences from your booking historytraveller-workspace.md

Is this for you?

Yes if you already plan trips with an AI assistant and want it to search real flights, hotels, trains, buses, ferries, and transfers instead of guessing — or if you're building an app that needs travel intent without a paid travel API.

Probably not if you just want to book on a website (use Google Flights), or you want a hosted product with an account and dashboard. trvl is a tool you run, not a service you log into.

Full positioning: docs/POSITIONING.md.

Install

Let your AI do it — paste into Claude Code, Cursor, Windsurf, or Codex:

Read https://raw.githubusercontent.com/MikkoParkkola/trvl/main/AGENTS.md and set up trvl

It installs the binary, wires the MCP server, installs the skill, and verifies everything. Under a minute.

Or by hand:

brew install MikkoParkkola/tap/trvl   # install

trvl mcp install # auto-detects your AI client

Restart your client. trvl mcp install --client targets a specific one (10 supported: Claude Desktop/Code, Cursor, Windsurf, Codex, VS Code, Zed, Gemini, Amazon Q, LM Studio).

More ways to install (Go, Docker, raw binary, manual config)

# Direct binary (no Homebrew)

TRVL_VERSION="$(curl -fsSLI -o /dev/null -w '%{url_effective}' https://github.com/MikkoParkkola/trvl/releases/latest | sed 's#.*/v##')" curl -fsSL "https://github.com/MikkoParkkola/trvl/releases/download/v${TRVL_VERSION}/trvl_${TRVL_VERSION}_$(uname -s | tr '[:upper:]' '[:lower:]')_$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/').tar.gz" | tar xz -C /usr/local/bin trvl

Go

go install github.com/MikkoParkkola/trvl/cmd/trvl@latest

Docker

docker run --rm ghcr.io/mikkoparkkola/trvl flights HEL NRT 2027-06-15

Build from source

git clone https://github.com/MikkoParkkola/trvl.git && cd trvl && make build

Claude Code CLI

claude mcp add trvl --transport stdio -- trvl mcp

Manual JSON (Claude Desktop, Cursor, Windsurf, etc.)

{ "mcpServers": { "trvl": { "command": "trvl", "args": ["mcp"] } } }

Try it

Paste any of these to your assistant once trvl is wired:

Find the cheapest realistic trip from Helsinki for the long weekend of July 1–5, nonstop, hotel near the center.

Compare award sweet spots HEL→LHR business on Aug 15 with 80k Amex MR + 20k Virgin points. Create a mistake-fare watch for HEL→BCN, July 1–8, and alert me below €90.

More starter prompts and what good answers look like: docs/DEMO.md.

Why trust it

An AI agent acts on trvl's output without a human checking every result, so the bar is correctness, not just coverage.

  • It tells you when it can't. A blocked or rate-limited provider returns a typed status (AKAMAI_BLOCK, RATE_LIMITED, BOOKING_COOKIES_MISSING) with a fix hint, instead of a fake "nothing found." Estimated values are labelled; currency-mismatched totals are skipped, not faked.
  • Tested more than it is written. More test code than source, race-checked on macOS, Linux, and Windows. A smoke gate runs the packaged binary before any release — a build that doesn't run can't ship.
  • It degrades gracefully. Providers run concurrently with per-provider timeouts; one source failing returns partial results instead of aborting the search.
  • It's observable. trvl status (or the local /dashboard in HTTP mode) shows per-provider success rate, latency, freshness, and circuit-breaker state.

On hotel prices specifically. Hotel metasearch exposes list-level rates first; some are real, some only firm up after the property detail page reveals the room/tax/cancellation matrix. So trvl separates discovery (search_hotels — fast, lead-in prices) from decisions (search_accommodations — verifies room-level offers before ranking) and drill-down (search_hotels_with_details, hotel_rooms). It provides booking links for manual handoff but never books, holds, or guarantees a rate. Detail: docs/PROVIDERS.md.

What trvl reads, and what it keeps

Two things happen without you asking for them. Neither is obvious, so both are stated here rather than left to a linked page.

It reads your browser's cookies, automatically. Hotel and rail sites put bot protection in front of their search APIs, and trvl gets past it by reusing the browser session you already have — that is why searches work with no API key. The reads start when trvl launches, before any search. No flag turns them on. On macOS, browser cookie stores are encrypted, so reading them means Keychain access and you should expect a Keychain prompt. What is read is your own session cookies for the site being searched, and they go into the request t

冒頭だけを表示しています。続きはリポジトリで読めます

PopNxに聞く