Namma Yatri Ride Booking

Assists users in booking rides with Namma Yatri by managing searches, bookings, and ride status through API calls.

Install this skill

0/100

Security score

The Namma Yatri Ride Booking skill was audited on Jun 6, 2026 and we found 41 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 36

Curl to non-GitHub URL

SourceSKILL.md

36	curl -s -X POST "https://api.moving.tech/pilot/app/v2/auth/get-token" \

medium line 67

Curl to non-GitHub URL

SourceSKILL.md

67	curl -s -X GET "https://api.moving.tech/pilot/app/v2/savedLocation/list" \

medium line 88

Curl to non-GitHub URL

SourceSKILL.md

88	curl -s -X POST "https://api.moving.tech/pilot/app/v2/maps/autoComplete" \

medium line 120

Curl to non-GitHub URL

SourceSKILL.md

120	curl -s -X POST "https://api.moving.tech/pilot/app/v2/maps/getPlaceName" \

medium line 133

Curl to non-GitHub URL

SourceSKILL.md

133	curl -s -X POST "https://api.moving.tech/pilot/app/v2/maps/getPlaceName" \

medium line 156

Curl to non-GitHub URL

SourceSKILL.md

156	curl -s -X POST "https://api.moving.tech/pilot/app/v2/rideSearch" \

medium line 197

Curl to non-GitHub URL

SourceSKILL.md

197	curl -s -X GET "https://api.moving.tech/pilot/app/v2/rideSearch/<SEARCH_ID>/results" \

medium line 217

Curl to non-GitHub URL

SourceSKILL.md

217	curl -s -X POST "https://api.moving.tech/pilot/app/v2/estimate/<PRIMARY_ESTIMATE_ID>/select2" \

medium line 235

Curl to non-GitHub URL

SourceSKILL.md

235	curl -s -X GET "https://api.moving.tech/pilot/app/v2/rideBooking/list?onlyActive=true&clientId=ACP_SERVER" \

medium line 251

Curl to non-GitHub URL

SourceSKILL.md

251	curl -s -X POST "https://api.moving.tech/pilot/app/v2/estimate/<ESTIMATE_ID>/select2" \

medium line 275

Curl to non-GitHub URL

SourceSKILL.md

275	curl -s -X POST "https://api.moving.tech/pilot/app/v2/estimate/<ESTIMATE_ID>/cancelSearch" \

medium line 294

Curl to non-GitHub URL

SourceSKILL.md

294	curl -s -X GET "https://api.moving.tech/pilot/app/v2/rideBooking/list?onlyActive=true&clientId=ACP_SERVER" \

medium line 314

Curl to non-GitHub URL

SourceSKILL.md

314	curl -s -X GET "https://api.moving.tech/pilot/app/v2/cancellationReason/list?cancellationStage=<STAGE>" \

medium line 339

Curl to non-GitHub URL

SourceSKILL.md

339	curl -s -X POST "https://api.moving.tech/pilot/app/v2/rideBooking/<BOOKING_ID>/cancel" \

medium line 370

Curl to non-GitHub URL

SourceSKILL.md

370	curl -s -X GET "https://api.moving.tech/pilot/app/v2/rideBooking/v2/<BOOKING_ID>" \

medium line 399

Curl to non-GitHub URL

SourceSKILL.md

399	curl -s -X GET "https://api.moving.tech/pilot/app/v2/ride/<RIDE_ID>/status" \

medium line 436

Curl to non-GitHub URL

SourceSKILL.md

436	curl -s -X POST "https://api.moving.tech/pilot/app/v2/payment/<RIDE_ID>/addTip" \

medium line 462

Curl to non-GitHub URL

SourceSKILL.md

462	curl -s -X GET "https://api.moving.tech/pilot/app/v2/priceBreakup?bookingId=<BOOKING_ID>" \

medium line 12

Access to hidden dotfiles in home directory

SourceSKILL.md

12	- Token file: `~/.namma-yatri-mcp/user-token.json`

medium line 18

Access to hidden dotfiles in home directory

SourceSKILL.md

18	Before doing anything, check if the user is already signed in by looking for `~/.namma-yatri-mcp/user-token.json`.

medium line 49

Access to hidden dotfiles in home directory

SourceSKILL.md

49	3. Save everything to `~/.namma-yatri-mcp/user-token.json`:

medium line 74

Access to hidden dotfiles in home directory

SourceSKILL.md

74	After fetching: Update `~/.namma-yatri-mcp/user-token.json` with the new `savedLocations` list and set `savedLocationsUpdatedAt` to now.

low line 9

External URL reference

SourceSKILL.md

9	- Base URL: `https://api.moving.tech/pilot/app/v2`

low line 36

External URL reference

SourceSKILL.md

36	curl -s -X POST "https://api.moving.tech/pilot/app/v2/auth/get-token" \

low line 67

External URL reference

SourceSKILL.md

67	curl -s -X GET "https://api.moving.tech/pilot/app/v2/savedLocation/list" \

low line 88

External URL reference

SourceSKILL.md

88	curl -s -X POST "https://api.moving.tech/pilot/app/v2/maps/autoComplete" \

low line 120

External URL reference

SourceSKILL.md

120	curl -s -X POST "https://api.moving.tech/pilot/app/v2/maps/getPlaceName" \

low line 133

External URL reference

SourceSKILL.md

133	curl -s -X POST "https://api.moving.tech/pilot/app/v2/maps/getPlaceName" \

low line 156

External URL reference

SourceSKILL.md

156	curl -s -X POST "https://api.moving.tech/pilot/app/v2/rideSearch" \

low line 197

External URL reference

SourceSKILL.md

197	curl -s -X GET "https://api.moving.tech/pilot/app/v2/rideSearch/<SEARCH_ID>/results" \

low line 217

External URL reference

SourceSKILL.md

217	curl -s -X POST "https://api.moving.tech/pilot/app/v2/estimate/<PRIMARY_ESTIMATE_ID>/select2" \

low line 235

External URL reference

SourceSKILL.md

235	curl -s -X GET "https://api.moving.tech/pilot/app/v2/rideBooking/list?onlyActive=true&clientId=ACP_SERVER" \

low line 251

External URL reference

SourceSKILL.md

251	curl -s -X POST "https://api.moving.tech/pilot/app/v2/estimate/<ESTIMATE_ID>/select2" \

low line 275

External URL reference

SourceSKILL.md

275	curl -s -X POST "https://api.moving.tech/pilot/app/v2/estimate/<ESTIMATE_ID>/cancelSearch" \

low line 294

External URL reference

SourceSKILL.md

294	curl -s -X GET "https://api.moving.tech/pilot/app/v2/rideBooking/list?onlyActive=true&clientId=ACP_SERVER" \

low line 314

External URL reference

SourceSKILL.md

314	curl -s -X GET "https://api.moving.tech/pilot/app/v2/cancellationReason/list?cancellationStage=<STAGE>" \

low line 339

External URL reference

SourceSKILL.md

339	curl -s -X POST "https://api.moving.tech/pilot/app/v2/rideBooking/<BOOKING_ID>/cancel" \

low line 370

External URL reference

SourceSKILL.md

370	curl -s -X GET "https://api.moving.tech/pilot/app/v2/rideBooking/v2/<BOOKING_ID>" \

low line 399

External URL reference

SourceSKILL.md

399	curl -s -X GET "https://api.moving.tech/pilot/app/v2/ride/<RIDE_ID>/status" \

low line 436

External URL reference

SourceSKILL.md

436	curl -s -X POST "https://api.moving.tech/pilot/app/v2/payment/<RIDE_ID>/addTip" \

low line 462

External URL reference

SourceSKILL.md

462	curl -s -X GET "https://api.moving.tech/pilot/app/v2/priceBreakup?bookingId=<BOOKING_ID>" \

Scanned on Jun 6, 2026

View Security Dashboard

Installation guide →

Rate this skill

Categorysales

UpdatedJune 15, 2026

openclaw api customer-success-manager support-agent product-manager sales support product

nammayatri/ny-connectors