Skip to main content
Glama
ifood-mcp

ifood-mcp

非官方。 与 iFood 无关联,未获得 iFood 的认可或支持。并非 merchant-api Partners 门户。消费者网页界面可能随时更改,恕不另行通知。

默认绝不支付。 除非启用了 IFOOD_ALLOW_MUTATIONS 并且 explicit_user_intent 为 true,否则 ifood_checkout 不会执行任何操作。

WAF: 从 Node 访问 www.ifood.com.br/site-api 会被 Cloudflare 拦截。即使家用浏览器的 JWT 可用,搜索/首页/GraphQL 请求在数据中心 IP 上仍可能收到 Akamai 的 Access Denied(访问被拒绝)。这些路由并未作为 401 已验证路由提供。

60 秒完成设置

npx -y ifood-mcp-unofficial setup
npx -y ifood-mcp-unofficial auth start --email you@email.com
npx -y ifood-mcp-unofficial auth complete --code 123456 --email you@email.com
npx -y ifood-mcp-unofficial doctor

备用方案(无 OTP):以登录状态打开 ifood.com.br → DevTools → Network → 任一个 marketplace.ifood.com.br 请求 → 复制 Authorization,然后:

npx -y ifood-mcp-unofficial auth --from-header "Bearer eyJ…"

Stdio 代码片段。这里不要设置 IFOOD_ALLOW_MUTATIONS:

{
  "mcpServers": {
    "ifood": {
      "command": "npx",
      "args": ["-y", "ifood-mcp-unofficial"]
    }
  }
}

Related MCP server: 99 MCP

工具

类型

工具

读取 · 我的

ifood_customer_me, ifood_list_addresses, ifood_contact_methods, ifood_list_payment_methods, ifood_loyalty_cards, ifood_benefits

读取 · 订单

ifood_list_orders, ifood_get_order, ifood_previous_items, ifood_get_cart

读取 · 浏览

ifood_search, ifood_home, ifood_categories, ifood_merchant_info, ifood_filter_options, ifood_reviews, ifood_merchant_payment_methods

元信息

ifood_connection_status, ifood_capabilities, ifood_privacy_audit

受控购物车

ifood_create_cart, ifood_set_delivery_method, ifood_set_payment_method

受控支付

ifood_checkout

仅意图

ifood_logout

HTTP(可选,回环)

npx -y ifood-mcp-unofficial --http

绑定 127.0.0.1 并检查 Origin。这是 DNS 重绑定缓解措施,并非公共服务器。

测试

npm test

无需真实登录 iFood。

Available Tools

33 tools
ifood_add_to_cartAdd items to iFood cartC
Destructive

POST /v1/carts on cw-marketplace (401 JSON no-jwt). Item subpaths 404. Dual-gated. Does not checkout.

NameRequiredDescriptionDefault
itemsYes
address_idNo
merchant_idYes
response_formatNomarkdown
explicit_user_intentNoMust be true after the user explicitly asked for this write.
ifood_benefitsiFood benefitsB
Read-onlyIdempotent

Wallet benefits and coupons. Read-only. Does not apply a coupon.

NameRequiredDescriptionDefault
privacy_modeNo
response_formatNomarkdown
ifood_capabilitiesiFood capabilitiesB
Read-onlyIdempotent

What this unofficial MCP can read and which writes stay gated.

NameRequiredDescriptionDefault
response_formatNomarkdown
ifood_categoriesiFood categoriesB
Read-onlyIdempotent

Top-level categories near a point. Read-only.

NameRequiredDescriptionDefault
latitudeYes
longitudeYes
privacy_modeNo
response_formatNomarkdown
ifood_checkoutPlace iFood orderA
Destructive

FAIL-CLOSED. Charges money on wsloja checkout. Requires IFOOD_ALLOW_MUTATIONS and explicit_user_intent.

NameRequiredDescriptionDefault
cart_idYes
response_formatNomarkdown
checkout_payloadYes
explicit_user_intentNoMust be true after the user explicitly asked for this write.
ifood_connection_statusiFood connection statusC
Read-onlyIdempotent

Local doctor: token present, mutations off by default, unofficial consumer surface.

NameRequiredDescriptionDefault
response_formatNomarkdown
ifood_contact_methodsiFood contact methodsB
Read-onlyIdempotent

Verified emails and phones. Redacted by default.

NameRequiredDescriptionDefault
privacy_modeNo
response_formatNomarkdown
ifood_create_addressCreate iFood addressC
Destructive

POST /v1/customers/me/addresses (401 JSON no-jwt). Requires explicit_user_intent. PUT/DELETE :id 404.

NameRequiredDescriptionDefault
cityNo
numberNo
streetNo
latitudeYes
longitudeYes
complementNo
neighborhoodNo
response_formatNomarkdown
explicit_user_intentNoMust be true after the user explicitly asked for this write.
ifood_create_cartCreate iFood cartA
Destructive

Gated write on cw-marketplace. Requires IFOOD_ALLOW_MUTATIONS and explicit_user_intent. Does not checkout.

NameRequiredDescriptionDefault
itemsYes
address_idNo
merchant_idYes
response_formatNomarkdown
explicit_user_intentNoMust be true after the user explicitly asked for this write.
ifood_customer_meiFood profileB
Read-onlyIdempotent

Authenticated customer profile. Identity redacted by default.

NameRequiredDescriptionDefault
privacy_modeNo
response_formatNomarkdown
ifood_filter_optionsiFood search filtersB
Read-onlyIdempotent

Public filter catalog (200 without auth). Read-only.

NameRequiredDescriptionDefault
privacy_modeNo
response_formatNomarkdown
ifood_get_cartGet iFood cartB
Read-onlyIdempotent

Inspect a cart on cw-marketplace. Read-only.

NameRequiredDescriptionDefault
cart_idYes
privacy_modeNo
response_formatNomarkdown
ifood_get_orderGet iFood orderB
Read-onlyIdempotent

One order by id (v3). Read-only.

NameRequiredDescriptionDefault
order_idYes
privacy_modeNo
response_formatNomarkdown
ifood_get_order_etaiFood order ETAB
Read-onlyIdempotent

Dedicated /eta URL 404. Reads the live order payload. Read-only.

NameRequiredDescriptionDefault
order_idYes
privacy_modeNo
response_formatNomarkdown
ifood_get_order_invoiceiFood order invoiceC
Read-onlyIdempotent

Dedicated /invoice /nfe URLs 404. Reads the live order payload. Read-only.

NameRequiredDescriptionDefault
order_idYes
privacy_modeNo
response_formatNomarkdown
ifood_get_order_receiptiFood order receiptA
Read-onlyIdempotent

Dedicated /receipt URL 404. Reads the live order payload. Read-only.

NameRequiredDescriptionDefault
order_idYes
privacy_modeNo
response_formatNomarkdown
ifood_homeiFood home feedB
Read-onlyIdempotent

Localized home cards. Read-only. May WAF from datacenter IPs.

NameRequiredDescriptionDefault
latitudeYes
longitudeYes
privacy_modeNo
response_formatNomarkdown
ifood_identitiesiFood external identitiesB
Read-onlyIdempotent

Allowlisted GET /v1/customers/me/external-identities. Identity redacted. Read-only.

NameRequiredDescriptionDefault
privacy_modeNo
response_formatNomarkdown
ifood_list_active_ordersList active iFood ordersB
Read-onlyIdempotent

GET /v4/customers/me/orders?status=ONGOING (401 JSON without jwt). Read-only.

NameRequiredDescriptionDefault
pageNo
sizeNo
privacy_modeNo
response_formatNomarkdown
ifood_list_addressesList iFood addressesB
Read-onlyIdempotent

Saved delivery addresses. Street/phone/email redacted by default.

NameRequiredDescriptionDefault
privacy_modeNo
response_formatNomarkdown
ifood_list_ordersList iFood ordersC
Read-onlyIdempotent

Past orders (v4). Read-only.

NameRequiredDescriptionDefault
pageNo
sizeNo
privacy_modeNo
response_formatNomarkdown
ifood_list_payment_methodsList iFood payment methodsB
Read-onlyIdempotent

Saved wallet methods. Last-four redacted. Does not charge.

NameRequiredDescriptionDefault
privacy_modeNo
response_formatNomarkdown
ifood_logoutLogout iFood MCPA
DestructiveIdempotent

Clears ~/.ifood-mcp/tokens.json. Requires explicit_user_intent.

NameRequiredDescriptionDefault
response_formatNomarkdown
explicit_user_intentNoMust be true after the user explicitly asked for this write.
ifood_loyalty_cardsiFood loyaltyC
Read-onlyIdempotent

Club / stamps. Read-only.

NameRequiredDescriptionDefault
privacy_modeNo
response_formatNomarkdown
ifood_merchant_infoiFood merchant infoA
Read-onlyIdempotent

Fees, hours, rating via unofficial GraphQL. Read-only. May WAF from datacenter IPs.

NameRequiredDescriptionDefault
merchant_idYes
privacy_modeNo
response_formatNomarkdown
ifood_merchant_payment_methodsMerchant payment methodsC
Read-onlyIdempotent

How a restaurant accepts payment. Read-only.

NameRequiredDescriptionDefault
merchant_idYes
privacy_modeNo
response_formatNomarkdown
ifood_previous_itemsPrevious items at merchantC
Read-onlyIdempotent

Items you ordered before at this merchant. Read-only.

NameRequiredDescriptionDefault
merchant_idYes
privacy_modeNo
response_formatNomarkdown
ifood_privacy_auditiFood privacy auditC
Read-onlyIdempotent

Redaction defaults and fail-closed checkout.

NameRequiredDescriptionDefault
response_formatNomarkdown
ifood_reviewsiFood reviewsC
Read-onlyIdempotent

Merchant reviews. Read-only.

NameRequiredDescriptionDefault
merchant_idYes
privacy_modeNo
response_formatNomarkdown
ifood_set_delivery_methodSet iFood delivery methodC
Destructive

Gated cart write. DEFAULT / PRIORITY / TAKEOUT.

NameRequiredDescriptionDefault
methodYes
cart_idYes
response_formatNomarkdown
explicit_user_intentNoMust be true after the user explicitly asked for this write.
ifood_set_payment_methodSet iFood cart paymentA
Destructive

Gated cart write. Does not charge.

NameRequiredDescriptionDefault
cart_idYes
response_formatNomarkdown
payment_method_idsYes
explicit_user_intentNoMust be true after the user explicitly asked for this write.
ifood_track_orderTrack iFood orderB
Read-onlyIdempotent

Dedicated /tracking URLs 404. Reads the live GET /v3/customers/me/orders/:id payload instead. Read-only.

NameRequiredDescriptionDefault
order_idYes
privacy_modeNo
response_formatNomarkdown

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 8 tool updatesv0.1.5
    • Addedifood_add_to_cart
    • Addedifood_create_address
    • Addedifood_get_order_eta
    • Addedifood_get_order_invoice
    • Addedifood_get_order_receipt
    • Addedifood_identities
    • Addedifood_list_active_orders
    • Addedifood_track_order
  2. 25 tool updatesv0.1.1
    • First observedifood_benefits
    • First observedifood_capabilities
    • First observedifood_categories
    • First observedifood_checkout
    • First observedifood_connection_status
    • First observedifood_contact_methods
    • First observedifood_create_cart
    • First observedifood_customer_me
    • First observedifood_filter_options
    • First observedifood_get_cart
    • First observedifood_get_order
    • First observedifood_home
    • First observedifood_list_addresses
    • First observedifood_list_orders
    • First observedifood_list_payment_methods
    • First observedifood_logout
    • First observedifood_loyalty_cards
    • First observedifood_merchant_info
    • First observedifood_merchant_payment_methods
    • First observedifood_previous_items
    • First observedifood_privacy_audit
    • First observedifood_reviews
    • First observedifood_search
    • First observedifood_set_delivery_method
    • First observedifood_set_payment_method

TDQS

C2.8/5.0

Scored across 33 tools

Disambiguation4/5

Most tools target distinct resources or actions, and the descriptions clarify boundaries. The order-related tools (list_orders, get_order, track_order, get_order_eta, get_order_receipt, get_order_invoice) overlap somewhat since several read the same live order payload, though each extracts a different slice.

Naming Consistency3/5

All tools share the ifood_ prefix and snake_case, but the verb_noun pattern is inconsistent: some use action verbs (list_orders, get_order, create_cart), while many read-only tools are bare nouns (ifood_benefits, ifood_reviews, ifood_categories, ifood_merchant_info). The naming is readable but not uniform.

Tool Count2/5

33 tools is substantially above the well-scoped range, and many are narrow read-only variations around orders and customer data. While iFood is a broad domain, the surface feels heavier than necessary and could be consolidated.

Completeness3/5

The server covers customer profile, addresses, orders, search, cart, and checkout well, including gated writes. However, there are notable gaps such as no cart item removal, no order cancellation, and no update/delete for addresses, which limits common lifecycle workflows.

Maintenance

ActivityActive
ResponsivenessNo recent community issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    C
    quality
    B
    maintenance
    Lets users search nearby stores and products, inspect their Rappi cart, manage saved addresses, and track orders locally, with payment and checkout actions disabled by default unless explicitly enabled and confirmed. It uses an undocumented Rappi API and protects privacy through redaction and local token storage.
    42
    25 npm
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    Enables AI agents to get 99Pop and 99Moto fare estimates, ride history, and live tracking while keeping credentials local and ride requests fail-closed by default.
    14
    59 npm
    1
    MIT
  • A
    license
    C
    quality
    B
    maintenance
    Provides AI agents with access to Zé Delivery's product catalog, search, and order tracking, with order placement and cancellation available only after explicit user consent and opt-in.
    22
    12 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables an AI assistant to browse restaurants and menus, manage a cart, reorder past orders, review checkout details, and place food delivery orders, returning a payment link to complete payment.
    13
    MIT