F
licenseNot graded
qualityD
maintenanceEnables AI agents to browse product catalogs, search products with filters, and initiate checkouts, generating order summaries and checkout URLs.
ifood-mcp
by davidmosiah
This server exposes an unofficial, local-first MCP interface to iFood, mostly read-only access to your account, orders, and restaurant browsing, plus fail-closed gated mutations that never run unless explicitly enabled and user-approved.
Account data: read profile, saved addresses, contact methods, payment methods (redacted by default), loyalty cards, and benefits/coupons.
Orders & cart: list past orders, get order details, see previous items at a merchant, and inspect an existing cart.
Browse & search: search restaurants/items, get home feed, categories, merchant info, reviews, filter options, and merchant payment methods.
Meta tools: check connection status, view capabilities, and run a privacy audit.
Gated cart writes: create a cart, set delivery method, set payment method — only with
IFOOD_ALLOW_MUTATIONSandexplicit_user_intent=true.Gated checkout: place an order, charges money, fail-closed, requires both mutation opt-in and explicit user intent.
Logout: clears stored tokens, also requires explicit user intent.
Responses can be markdown or JSON, with optional privacy redaction modes.
Provides tools for interacting with iFood, enabling AI agents to view customer data, addresses, payment methods, orders, and cart contents, as well as browse restaurants, search, and optionally manage the cart and perform checkout with explicit opt-in.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ifood-mcpShow my most recent iFood order"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Unofficial. Not affiliated with, endorsed by, or supported by iFood. Not the merchant-api Partners portal. The consumer web surface can change without notice.
Never pays by default.
ifood_checkoutdoes nothing unlessIFOOD_ALLOW_MUTATIONSis enabled andexplicit_user_intentis true.
WAF:
www.ifood.com.br/site-apiis Cloudflare-blocked from Node. Search/home/GraphQL may get Akamai Access Denied from datacenter IPs even when a home-browser JWT works. Those are not shipped as 401-verified routes.
Setup in 60 seconds
npx -y ifood-mcp-unofficial setup
npx -y ifood-mcp-unofficial auth start --email you@email.com
npx -y ifood-mcp-unofficial auth complete --code 123456 --email you@email.com
npx -y ifood-mcp-unofficial doctorFallback (no OTP): open ifood.com.br logged in → DevTools → Network → any marketplace.ifood.com.br request → copy Authorization, then:
npx -y ifood-mcp-unofficial auth --from-header "Bearer eyJ…"Stdio snippet. Do not set IFOOD_ALLOW_MUTATIONS here:
{
"mcpServers": {
"ifood": {
"command": "npx",
"args": ["-y", "ifood-mcp-unofficial"]
}
}
}Related MCP server: ParcelPilot MCP Server
Skill or MCP
Same package, two doors. MCP registers tools on stdio/HTTP. The skill is the workflow (orders/search → stop before checkout) and can drive the same tools through the CLI when the client has no MCP:
npx -y ifood-mcp-unofficial call ifood_list_orders --json '{}'Gates are identical. Copy skill/SKILL.md into your agent skills dir (~/.agents/skills/ifood/ or Claude/Grok equivalent).
Tools
Kind | Tools |
Read · me |
|
Read · orders |
|
Read · browse |
|
Meta |
|
Gated cart |
|
Gated pay |
|
Intent only |
|
HTTP (optional, loopback)
npx -y ifood-mcp-unofficial --httpBinds 127.0.0.1 and checks Origin. DNS-rebinding mitigation, not a public server.
Tests
npm testNo live iFood login required.
Maintenance
–Maintainers
–Response time
0dRelease cycle
3Releases (12mo)
Commit activity
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceEnables AI agents to retrieve customer, order, ticket, policy, and agreement information, and to prepare or execute state-changing support actions like escalations and follow-ups with confirmation and access control.
- AlicenseCqualityAmaintenanceLets users search nearby stores and products, inspect their Rappi cart, manage saved addresses, and track orders locally, with payment and checkout actions disabled by default unless explicitly enabled and confirmed. It uses an undocumented Rappi API and protects privacy through redaction and local token storage.40953MIT
- AlicenseBqualityBmaintenanceEnables AI agents to get 99Pop and 99Moto fare estimates, ride history, and live tracking while keeping credentials local and ride requests fail-closed by default.11113MIT
Related MCP Connectors
Manage your NanoCart store from any AI agent: products, orders, coupons, subscribers, reports.
Odoo ERP for AI agents: hosted OAuth endpoint, gated writes, one endpoint for every instance.
Let AI agents add Yolfi crypto checkout, paylinks, webhooks, and status checks.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/davidmosiah/ifood-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server