← Back to search

io.github.cyanheads/national-parks-mcp-server

cyanheads streamable_http Scanned 24d ago

Plan US National Park Service trips — parks, alerts, campgrounds, things to do, events.

B
89.5 / 100

Versions

0.1.0latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

nps_get_park
annotations: verified low

Full trip-planning detail for one or more parks by parkCode: description, activities and topics, entrance fees and passes, operating hours by area/season, contacts, directions, a free-text weather overview, representative images, and the NPS page for everything else. Get codes from nps_find_parks. Up to ten codes are fetched in a single request. Use the fields parameter to trim the payload when you only need certain sections.

input object output object states string fullName string latitude number parkCode string
readOnlyHint true openWorldHint true
nps_get_activities
annotations: verified low

Curated things to do and points of interest at a park — title, description, time commitment, location, accessibility, and fee/pet/reservation flags — answering "what should I do at Acadia?" Covers the NPS editorially-curated activity list (distinct from a park\'s raw activity tags in nps_get_park). Accepts a single 4-letter park code or a single two-letter state code, and at least one is required. Not every park has a curated list; an empty result is not an error.

id string input object start number output object shortDescription string
readOnlyHint true openWorldHint true
nps_find_events
annotations: verified low

Scheduled events at a park within a date range — ranger programs, festivals, tours, interpretive events — answering "what\'s happening at Yellowstone this weekend?" with title, dates and times, location, category, fee, and registration links. Get park codes from nps_find_parks. Paginates by page number, not offset. The events feed is sparser and less consistent than alerts or campgrounds; many parks list few or no events, and an empty result is not an error.

id string input object output object
readOnlyHint true openWorldHint true
nps_get_alerts
annotations: verified low

Current alerts for a park or a whole state — closures, hazards, caution notices, and information — with category and recency surfaced first so "is anything closed at Glacier right now?" is answered at a glance. Get park codes from nps_find_parks, or pass a stateCode for a statewide "what\'s closed" sweep. Returns most-recent-first; an empty result with totalCount 0 means the park reports nothing closed or hazardous — good news, not an error. An empty page with a non-zero totalCount only means start ran past the end, so read the notice rather than the empty list. Closures and road conditions change daily — re-check before departure.

input object
readOnlyHint true openWorldHint true
nps_find_campgrounds
annotations: verified low

Campgrounds at a park or across a state: amenities (potable water, showers, RV dump station, toilets, trash collection, RV access), reservable vs. first-come-first-served site counts, reservation guidance and booking URL, accessibility, and fees — answering "where can I camp at Zion, and can I get an RV hookup?" Get park codes from nps_find_parks. Some parks list lodging or backcountry permits instead of NPS-managed campgrounds; an empty result is not an error.

id string input object start number output object latitude number parkCode string longitude number
readOnlyHint true openWorldHint true
nps_find_parks
annotations: verified low

Resolve a place name, US state, or free-text query to National Park Service parks — the required first step before the detail tools. Returns each park's parkCode (the key nps_get_park, nps_get_alerts, nps_find_campgrounds, nps_get_activities, and nps_find_events all use) plus a compact trip-planning summary (designation, states, description, coordinates, headline activities, entrance fee, NPS page). Coverage is US NPS sites only — national parks, monuments, historic sites, seashores — not state parks and not Forest Service or BLM land.

input object output object
readOnlyHint true openWorldHint true

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 22

info
Tool 'nps_get_park' annotations are consistent annotation_checker · 80%
info
Tool 'nps_get_activities' annotations are consistent annotation_checker · 80%
info
Tool 'nps_find_events' annotations are consistent annotation_checker · 80%
info
Tool 'nps_get_alerts' annotations are consistent annotation_checker · 80%
info
Tool 'nps_find_campgrounds' annotations are consistent annotation_checker · 80%
info
Tool 'nps_find_parks' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
OSV.dev API query failed dependency_analyzer · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: nps_get_park manifest_parser · 75%
info
Tool: nps_get_activities manifest_parser · 75%
info
Tool: nps_find_events manifest_parser · 75%
info
Tool: nps_get_alerts manifest_parser · 75%
info
Tool: nps_find_campgrounds manifest_parser · 75%
info
Tool: nps_find_parks manifest_parser · 75%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 11 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-national-parks-mcp-server-6ae6e16/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%