Skip to main content
Glama
HRAshton

DailyMeals MCP

by HRAshton

DailyMeals MCP

A private Streamable HTTP MCP server for one DailyMeals account, deployed as a Cloudflare Worker. It reads live order data using a scoped cookie and submits only the exact form data supplied by DailyMeals.

Safety model

  • /mcp requires Authorization: Bearer $MCP_AUTH_TOKEN; it is never public.

  • DAILYMEALS_COOKIE and MCP_AUTH_TOKEN are Worker secrets and are never returned in tool output.

  • Each idempotency key is owned by a Cloudflare Durable Object. Its serialized storage makes claiming a key atomic across Worker instances.

  • Drafts only read and validate. Submissions require confirmation: true, a new durable idempotency key, ownership/menu reload, and a final live reload immediately before the upstream write. A key is retained after a write starts because the upstream outcome may be unknown.

Related MCP server: Zomato Restaurant Partner MCP

Local development

npm install
npm test
npm run dev

Create .dev.vars locally (it is gitignored):

DAILYMEALS_COOKIE=...
MCP_AUTH_TOKEN=...
DAILYMEALS_ORIGIN=https://dailymeals.rs

The Worker runs at http://localhost:8787; connect an MCP client to http://localhost:8787/mcp with the bearer token. GET /healthz only reports whether both required secrets are configured.

Deploy to Cloudflare

Authenticate Wrangler, set the two secrets, then deploy. The first deployment creates the Durable Object through the v1 migration in wrangler.jsonc.

npx wrangler login
npx wrangler secret put DAILYMEALS_COOKIE
npx wrangler secret put MCP_AUTH_TOKEN
npm run deploy

DAILYMEALS_ORIGIN defaults to https://dailymeals.rs; set it as a Worker variable only when using a non-production endpoint. Keep the Worker URL private to the intended MCP client and retain the bearer-token check as the application authorization boundary.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables database querying and modification through an MCP server where each action is gated by human-granted scopes, per-call confirmations for destructive operations, and revocable access.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables MCP-capable clients to sign in with OAuth and perform purchaser tasks such as browsing catalogues, checking inventory, managing stocktakes and recipes, drafting requisitions, updating buy lists, exporting reports, and processing invoices. It also supports supplier access for listing and inspecting connections, catalogues, products, purchase orders, invoices, and entitled reports.
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables authenticated subscribers to inspect weekly menus, recipe ingredients, deliveries, order history, and plan quota, and to preview or replace and save weekly main-meal selections with read-back verification. It also preserves add-ons and surfaces deadlines, permissions, and revision conflicts.
    MIT