parknyc-mcp

parknyc-mcp

MCP server for ParkNYC (Flowbird) -- manage your NYC parking sessions, vehicles, and zones from any MCP client (Claude Code, Claude Desktop, etc.).

Note: The Flowbird consumer API is undocumented. This server was built by reverse-engineering the ParkNYC web app JavaScript bundles. No public API docs exist.

Setup

1. Install and build

git clone <repo-url> parknyc-mcp
cd parknyc-mcp
npm install
npm run build

2. Get your session cookies

The API authenticates via browser cookies. You need three: PHPSESSID, server, and user.

1. Open my.nyc.flowbirdapp.com in Chrome and log in. Check "Keep me logged in" to extend cookie lifetime from ~30 minutes to days/weeks.
2. Open DevTools (Cmd+Option+I) and go to the Network tab
3. Filter for customer/get and refresh the page
4. Click the customer/get request
5. Under Request Headers, find the Cookie line
6. Copy the full value -- it will look something like:

   server=.apachen2; PHPSESSID=abc123...; user=def456...

Important: Do not include the g_state cookie if present -- it contains JSON braces that break the config file. You only need PHPSESSID, server, and user.

3. Configure your MCP client

Claude Code

Add a .mcp.json file to your project root:

{
  "mcpServers": {
    "parknyc": {
      "command": "node",
      "args": ["/path/to/parknyc-mcp/dist/index.js"],
      "env": {
        "PARKNYC_COOKIES": "server=.apachen2; PHPSESSID=your_session_id; user=your_user_cookie"
      }
    }
  }
}

Claude Desktop

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

{
  "mcpServers": {
    "parknyc": {
      "command": "node",
      "args": ["/path/to/parknyc-mcp/dist/index.js"],
      "env": {
        "PARKNYC_COOKIES": "server=.apachen2; PHPSESSID=your_session_id; user=your_user_cookie"
      }
    }
  }
}

4. Session expiry

Cookies expire periodically. If you checked "Keep me logged in", they should last days to weeks. Without it, sessions expire in ~30 minutes. When you start getting 401 errors, repeat step 2 to get fresh cookies and update your config.

Environment Variables

| Variable | Required | Description | |----------|----------|-------------| | PARKNYC_COOKIES | Yes | Full cookie string from browser (must include PHPSESSID, server, user) | | PARKNYC_LANGUAGE | No | Language code for API responses (default: en) |

Available Tools

Read

| Tool | Description | |------|-------------| | get_account | Get your account profile (name, email, phone, address) | | get_active_sessions | Get currently active/ongoing parking sessions | | get_parking_history | Get past parking sessions with pagination | | get_order | Get details of a specific parking order by ID | | get_vehicles | List all registered vehicles | | search_zone | Search for a parking zone by number | | get_zone_info | Get zone details (facility ID or POS number) | | get_bookmarks | Get saved/favorite parking locations | | get_payment_accounts | Get payment methods on file (cards, e-wallet) |

Write

| Tool | Description | |------|-------------| | start_parking | Start a new parking session at a zone | | stop_parking | Stop an active parking session early | | extend_parking | Extend an active parking session | | cancel_parking | Cancel a parking order | | add_vehicle | Register a new vehicle | | delete_vehicle | Remove a vehicle from your account | | add_bookmark | Save a parking zone as a favorite | | delete_bookmark | Remove a saved favorite |

Example Usage

> Show my parking history from this week
> Do I have any active parking sessions?
> What vehicles are on my account?
> Search for zone 12345
> How much have I spent on parking this month?
> Start 15 minutes of parking at zone 12345 with my car

How It Works

The Flowbird/ParkNYC web app at my.nyc.flowbirdapp.com is a PHP-backed Angular SPA. This MCP server mimics the browser's API calls:

• Auth: Three cookies (PHPSESSID for PHP session, server for load balancer affinity, user for the auth identity token)
• Headers: X-MPP-Brand: parknyc on every request
• Params: platform=nyc, version=2.0.21+1792, and rt=<timestamp> on every request
• History: Uses /api/search/order/ with x-api-caller: customer header
• Parking: Two-step flow -- order/create (proposal) then order/confirm (payment)

Limitations

• No programmatic login: The login endpoint requires reCAPTCHA, so cookies must be obtained manually from a browser session
• Cookie expiry: PHP sessions and the user cookie expire; you'll need to refresh them periodically
• Start parking: The start_parking tool needs the zone's usertype value which varies by zone. This is still being refined and may not work for all zones
• Rate limits: Rapid API calls may trigger 503 responses from the server

License

MIT