ClickBus MCP

Unofficial. Not affiliated with, endorsed by, or supported by ClickBus. The consumer JSON at api.clickbus.com can change without notice. Partner /api/v3/trips 403 HTML is not shipped.

Never pays by default. clickbus_book and clickbus_cancel do nothing unless CLICKBUS_ALLOW_MUTATIONS is enabled and explicit_user_intent is true. Guest tokens cannot charge. Street, phone, email and GPS/latlng polylines are redacted.

Setup in 60 seconds

npx -y clickbus-mcp-unofficial setup
npx -y clickbus-mcp-unofficial auth --from-header "Bearer eyJ…"
npx -y clickbus-mcp-unofficial doctor

Token is not OAuth. Capture a consumer request to api.clickbus.com → copy the Authorization header. Place/trip search still run without a token; pay tools stay blocked.

Stdio snippet (Claude Desktop, Cursor, Grok Bot). Do not set mutations in the snippet:

{
  "mcpServers": {
    "clickbus": {
      "command": "npx",
      "args": ["-y", "clickbus-mcp-unofficial"]
    }
  }
}

See examples/claude-desktop.json and examples/grok-bot.md.

Related MCP server: MCP Booking

Skill or MCP

Same package, two doors. MCP registers tools on stdio/HTTP. The skill is the workflow (places → trips → stop before book) and can drive the same tools through the CLI when the client has no MCP:

npx -y clickbus-mcp-unofficial call clickbus_search_places --json '{"query":"fortaleza"}'

Gates are identical. Copy skill/SKILL.md into your agent skills dir (~/.agents/skills/clickbus/ or Claude/Grok equivalent).

Tools

HTTP (optional, loopback)

Default transport is stdio. Streamable HTTP binds 127.0.0.1 and checks Origin against http://127.0.0.1:<port> (override with CLICKBUS_MCP_ALLOWED_ORIGIN). This is DNS-rebinding mitigation, not a public server.

npx -y clickbus-mcp-unofficial --http
# GET  http://127.0.0.1:3000/health
# POST http://127.0.0.1:3000/mcp

Security

Tokens live in ~/.clickbus-mcp/tokens.json (0600). They are not in git, the npm tarball, or default examples. Full notes: SECURITY.md. Agents: llms.txt.

Tests

npm test

No live ClickBus login required.