Rappi MCP (unofficial)
This server is an unofficial, local-first MCP integration with Rappi that lets an AI agent browse stores/products, inspect carts/orders/addresses/payment methods, and optionally perform gated, fail-closed writes only when explicitly enabled and intended.
Browse/search (read-only): search stores and products, get store details, browse store/catalog/home/feed, and view recent searches using optional lat/lng.
Inspect cart (read-only): view the current personal cart or web cart; street/phone/email/last-four are redacted by default.
Manage addresses (read-only + intent-gated writes): list, geocode, create, update, delete, and set active address; writes require explicit_user_intent.
Orders (read-only): list orders, list active orders, get order details, track ETA, get status, receipt, invoice, and order summaries.
Payments/coupons/checkout preview (read-only): list saved payment methods, list coupons, and preview checkout totals without charging.
Gated cart mutations: add/update/clear cart and reorder from a past order; these require both RAPPI_ALLOW_MUTATIONS=true and explicit_user_intent=true, and do not checkout.
Gated pay mutations (fail-closed): place order, set payment method, cancel order, and tip; require mutations, explicit intent, and a personal (non-guest) token; can charge money/refund.
Intent-only actions: logout, rate order, and address changes; logout clears the local token file.
Meta/privacy tools: check connection status, see capabilities, and run a privacy audit showing redaction defaults and that checkout is off unless both gates are set.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Rappi MCP (unofficial)search for protein powder near me"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Unofficial. Not affiliated with, endorsed by, or supported by Rappi. Not the Rappi Partners restaurant API. The consumer web/app surface can change without notice.
Never pays by default.
rappi_place_orderand payment writes do nothing unlessRAPPI_ALLOW_MUTATIONSis enabled andexplicit_user_intentis true. Guest tokens cannot charge. Street, phone, email and last-four are redacted.
Setup in 60 seconds
npx -y rappi-mcp-unofficial setup
npx -y rappi-mcp-unofficial auth --from-header "Bearer eyJ…"
npx -y rappi-mcp-unofficial doctorToken is not OAuth. Open rappi.com.br logged in → DevTools → Network → any services.rappi.com.br call → copy the Authorization header. Guest search still works without a token; pay tools stay blocked.
Stdio snippet (Claude Desktop, Cursor, Grok Bot). Do not set RAPPI_ALLOW_MUTATIONS here:
{
"mcpServers": {
"rappi": {
"command": "npx",
"args": ["-y", "rappi-mcp-unofficial"]
}
}
}See examples/claude-desktop.json and examples/grok-bot.md.
Related MCP server: RappiMCP
Skill or MCP
Same package, two doors. MCP registers tools on stdio/HTTP. The skill is the workflow (search → compare → stop before checkout) and can drive the same tools through the CLI when the client has no MCP:
npx -y rappi-mcp-unofficial call rappi_search_stores --json '{"query":"leite"}'Gates are identical. Copy skill/SKILL.md into your agent skills dir (~/.agents/skills/rappi/ or Claude/Grok equivalent).
Tools
Kind | Tools |
Read · browse |
|
Read · cart / pay |
|
Read · address / orders |
|
Meta |
|
Gated cart (mutations and intent) |
|
Gated pay (mutations and intent) |
|
Intent only |
|
HTTP (optional, loopback)
Default transport is stdio. Streamable HTTP binds 127.0.0.1 and checks Origin against http://127.0.0.1:<port> (override with RAPPI_MCP_ALLOWED_ORIGIN). This is DNS-rebinding mitigation, not a public server.
npx -y rappi-mcp-unofficial --http
# GET http://127.0.0.1:3000/health
# POST http://127.0.0.1:3000/mcpSecurity
Tokens live in ~/.rappi-mcp/tokens.json (0600). They are not in git, the npm tarball, or default examples. Full notes: SECURITY.md. Agents: llms.txt.
Tests
npm testNo live Rappi login required.
Maintenance
Related MCP Servers
- FlicenseBqualityDmaintenanceEnables AI agents to search restaurants, browse menus, manage carts, and place orders on DoorDash programmatically. It utilizes a headless browser to interact with DoorDash's GraphQL API and bypass anti-bot protections for the full delivery lifecycle.222
- AlicenseAqualityDmaintenanceEnables Claude to browse stores, search products, manage the cart, and open checkout on Rappi Chile through natural language, automating grocery and delivery purchases.121MIT
- AlicenseAqualityAmaintenanceEnables searching products, comparing prices, and building optimal shopping lists across major Chilean supermarkets, using your local machine to access real-time prices and loyalty deals.144463MIT
- FlicenseNot gradedqualityBmaintenanceProvides a RESTful interface to DoorDash consumer services, eliminating the need for clients to handle JSON-RPC or SSE. Users can browse restaurants, manage carts, and fetch order receipts via simple HTTP endpoints.3
Related MCP Connectors
Agent-native product catalog: 300M+ products, 150,000+ stores, deliver_to ranking.
Read-only MCP server for Muovi, Argentina's trust-first local services marketplace (6 tools).
Search products in nearby stores. Agents can also list items for sale on a user's behalf.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/davidmosiah/rappi-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server