Connect AI assistants to Paxaver, the School Community Operating System, for authorized access to school lunch menus, student lunch orders, wallet balances, school events, restaurants, and school-community operations.
Scored across 22 tools
Every tool targets a distinct resource and action: event registration, volunteer signups, lunch orders, programs, wallet, and session context are cleanly separated. Overlapping concepts like registering for an event versus signing up for a volunteer shift are explicitly distinguished in the descriptions.
Tools consistently use snake_case and a verb-first pattern, with a sensible distinction between 'my' tools for the caller's own resources and school-scoped list/get tools. Minor lexical variation such as 'register_for_event' versus 'sign_up_for_volunteer_shift' follows domain language rather than breaking the pattern.
At 22 tools the set is above the typical 3-15 range and feels slightly heavy, but it spans six distinct domains (lunch, events, volunteering, programs, wallet, auth) with little obvious redundancy. Each tool appears to earn its place for a broad school-management surface.
Core flows for lunch orders, event registration, and volunteer signups are well covered, but programs have register and cancel operations without any list_my_program_registrations or program-fee payment tool. The descriptions also reference 'program administration tools' that are not present in the toolset, creating notable dead ends.
Cancels one of the authenticated user's own event tickets (ticket_id from list_my_event_registrations). Releases the reserved seats; for paid tickets the full amount is refunded to the user's wallet at that school. Only the ticket owner or a coordinator can cancel. DESTRUCTIVE - confirm with the user before cancelling.
Inputs: ticket_id (required). Returns: id, status
Cancels a finalized order and refunds the charge to the wallet. Only works before order labels have been sent; after that the request is rejected and the order stands. DESTRUCTIVE - confirm with the user before cancelling.
Inputs: order_id (required). Returns: id, status, refundCents, balanceCents
Cancels one of the authenticated user's own volunteer signups (signup_id from list_my_volunteer_signups) and frees the shift slot for others. No payment is involved. Only the volunteer themselves or an admin can cancel. DESTRUCTIVE - confirm with the user before cancelling.
Inputs: signup_id (required). Returns: id, status
Cancels one of the caller's own students' program registrations (registration_id from register_for_program). When the program has a waitlist, the backend automatically promotes the next waitlisted registration. Coordinators manage cancellations through the Paxaver panel. DESTRUCTIVE - confirm with the user before cancelling.
Inputs: registration_id (required), school_slug. Returns: id, status, promoted
Creates an unpaid draft lunch order with one or more items - nothing is charged until pay_lunch_order_draft commits it. Use for multi-item orders or when the user should review the total first; each items entry pairs a menu_item_id with a quantity. The draft total is the sum of item prices times quantities plus nothing else until pay_lunch_order_draft. To change or abandon the draft, use update_lunch_order_draft or discard_lunch_order_draft. FINANCIAL - confirm student, items, and date before calling.
Inputs: items (required), menu_date (required), student_id, school_slug. Returns: id, items, status, menuDate, +3 more
Permanently discards an unpaid draft order - the caller must own it and it must still be in draft status (order_id from create_lunch_order_draft). Nothing was ever charged, so there is no refund; the draft is simply deleted. For a finalized order use cancel_my_lunch_order instead. DESTRUCTIVE - confirm with the user before discarding.
Inputs: order_id (required). Returns: status, orderId
Read-only lookup with no side effects - safe to call repeatedly. Requires authentication: returns only the caller's own context (never another user's data): first name, sign-in account email, account region, server environment, active school, the students they are a guardian for, and their role codes at that school. This is the context-discovery call - most other tools need a student_id or school_slug from here, admin-role checks come from roles, and email/region/environment answer which account is signed in. Returns live account state, so call again if the user may have switched schools or had roles changed.
Inputs: no named parameters. Returns: email, roles, region, students, +4 more
Read-only lookup - never moves funds or has side effects. Requires authentication: returns only the caller's spendable wallet balance at their active school (wallets are scoped per school, so a balance at one school does not apply elsewhere), in cents and formatted. Live value reflecting orders and refunds up to the current moment - recheck before assuming funds are still available. Call before pay_lunch_order_draft or register_for_event to confirm the user can cover the charge; not needed for read-only lookups.
Inputs: no named parameters. Returns: currency, topUpUrl, balanceCents, balanceFormatted
Read-only lookup with no side effects - safe to call repeatedly. Returns one event's full detail for the selected school: date, times, location, capacity, ticket price, status, its volunteer shifts with remaining slots (cancelled shifts excluded), and the caller's own signups on those shifts. Get event_id from list_school_events. The shifts' id values are the shift_id input to sign_up_for_volunteer_shift; the mySignups entries' signupId feeds cancel_my_volunteer_signup.
Inputs: event_id (required), school_slug. Returns: id, name, sold, endsAt, +12 more
Read-only, no side effects. Returns the authenticated user's own event tickets at their active school - ticket id, event name/date/location, quantity, total paid, and status (paid or checked_in). Cancelled tickets are excluded. The id values returned are required by cancel_my_event_registration. Pair with list_school_events for events the user has not registered for.
Inputs: no named parameters. Returns: tickets
Returns lunch orders already placed - items, menu date, status, and total - for the authenticated user's students, newest first (up to ~100 most recent). Filters combine with AND: student_id narrows to one student; menu_date and month narrow the date range, and if both are given menu_date wins. With no filters returns recent orders across all of the user's students. Admins (pac_cordinator, lunch_cordinator) see school-wide orders; parents only their own students. For what can be ordered (menu and prices), use get_lunch_menu.
Inputs: month, menu_date, student_id. Returns: orders
Read-only, no side effects. Returns the authenticated user's active volunteer signups at their school - signup id, shift title/date/times, and the parent event. Cancelled signups are excluded. The id values returned are required by cancel_my_volunteer_signup.
Inputs: no named parameters. Returns: signups
Read-only lookup with no side effects - safe to call repeatedly. Requires authentication: returns only the caller's own wallet transaction history (type, amount, running balance, description, status, timestamps, school) - never card numbers, payment-method identifiers, or checkout links. Defaults to the active school; pass all_schools: true for every school the user belongs to, or student_id (own students only) to narrow to one student. Cursor-paginated, newest first: pass the returned nextCursor as cursor for the next page. topUpUrl is the regional top-up page on the Paxaver site for when the user asks to add funds. Filters combine with AND.
Inputs: end, type, start, cursor, +5 more. Returns: hasMore, perPage, topUpUrl, nextCursor, +1 more
Returns upcoming events for the user's active school: date, times, location, and whether registration is closed. The event IDs returned feed register_for_event and get_school_event - call get_school_event on an event for its volunteer shifts (whose IDs feed sign_up_for_volunteer_shift). To review or undo your own registrations and signups, use list_my_event_registrations / cancel_my_event_registration and list_my_volunteer_signups / cancel_my_volunteer_signup. Optionally filter by date range.
Inputs: end_date, start_date. Returns: events
Returns the active before/after-school, enrichment, and camp programs for the user's active school: name, description, type, dates, price, capacity, and how many seats are already enrolled. The program ids returned feed register_for_program and the program administration tools. Optionally filter by program_type.
Inputs: school_slug, program_type. Returns: programs
Commits a draft order from create_lunch_order_draft and charges the wallet for the item total plus optional tip_cents (donated to the school's PAC). Wallet-only: if the balance cannot cover the full total, the call fails with an error directing the user to open the Paxaver panel and top up the wallet balance, then retry - no card payment is offered through this tool. Not for new orders - use create_lunch_order_draft first. FINANCIAL - confirm the total before calling.
Inputs: order_id (required), tip_cents. Returns: status, orderId, tipCents, itemTotalCents
Registers the authenticated user for a school event and issues tickets to the caller (quantity is the number of tickets bought for the caller, 1 to 20 - there is no per-student split). For paid events quantity times the ticket price is charged to the user's wallet - the call fails on insufficient balance (the error includes the regional Paxaver top-up page for the user to add funds), when the event is sold out, or when registration is closed. To volunteer at an event rather than attend, use sign_up_for_volunteer_shift. FINANCIAL for paid events - confirm before registering.
Inputs: event_id (required), quantity, school_slug. Returns: id, status, eventId, quantity
Registers one of the caller's own students for a school program (before/after-school care, enrichment, camp). Returns status 'registered' when a seat is available or 'waitlist' when the program is at capacity - the backend enforces the capacity check atomically. The response records the program fee (amountCents) owed; no wallet charge happens on this call. program_id comes from list_school_programs, student_id from get_my_context. WRITE - confirm the student and program before calling.
Inputs: program_id (required), student_id (required), notes, school_slug. Returns: id, status, programId, amountCents
Ends the caller's current Paxaver sign-in for this MCP connection - revokes the session so the next request makes the client ask the user to sign in again. Call this ONLY when the user explicitly asks to sign out, log in again, or switch to a different Paxaver account or region. Deletes no data and changes no settings. An app that holds its own Paxaver credentials cannot be signed out here - the result then says to disconnect in that app or in Paxaver account settings instead.
Inputs: no named parameters. Returns: account, message, signedOut
Signs the authenticated user up for a specific volunteer shift - no payment involved. shift_id identifies one shift within an event, not the event itself: get it from the event's volunteer shifts in get_school_event. The call fails when the shift is full or cancelled. To attend an event as a guest instead, use register_for_event. WRITE - confirm with the user before signing up.
Inputs: shift_id (required). Returns: id, status, shiftId
Replaces the items and/or menu_date of an unpaid draft order before it is finalized - the caller must own the draft and it must still be in draft status (order_id from create_lunch_order_draft). Pass the complete items list: it replaces the draft's items wholesale and the total is recomputed from menu prices times quantity. Only draft orders can be updated; once finalized, use cancel_my_lunch_order. WRITE - confirm the new contents with the user.
Inputs: order_id (required), items, menu_date. Returns: status, orderId
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Add one secure layer between your agents and this server.
