Rappi MCP (unofficial)
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| RAPPI_ALLOW_MUTATIONS | No | Set to a truthy value (e.g., 'true') to enable mutation tools like place_order, cancel_order, etc. Without this, all payment and cart mutation operations fail closed. Do not set for read-only usage. | |
| RAPPI_MCP_ALLOWED_ORIGIN | No | Overrides the allowed Origin for the optional HTTP transport. Defaults to http://127.0.0.1:<port> (the port is 3000 by default). Used as DNS-rebinding mitigation. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| rappi_connection_statusC | Local doctor: token present, mutations off by default, unofficial consumer surface. |
| rappi_capabilitiesC | What this unofficial MCP can read and which writes stay gated. |
| rappi_privacy_auditA | Shows redaction defaults, token path, and that checkout is off unless both gates are set. |
| rappi_search_storesB | Browse nearby stores on the unofficial Rappi consumer surface. Optional lat/lng (or RAPPI_LAT/RAPPI_LNG). Read-only. |
| rappi_search_productsC | Search products near a point. Does not add to cart. Read-only. |
| rappi_get_cartA | Inspect the current personal cart. Street/phone/email/last-four redacted by default. |
| rappi_list_addressesA | List saved delivery addresses. Street, phone and email are redacted in the default privacy mode. |
| rappi_list_ordersC | List recent personal orders / tracking summaries. Read-only. |
| rappi_get_orderC | Track one order by id. Read-only. |
| rappi_track_orderC | Live tracking / ETA for one order (unofficial user-order-home tracking). Read-only. |
| rappi_get_storeC | Store catalog/detail from unofficial pns-global-search stores/{id}. Read-only. |
| rappi_list_payment_methodsA | Read saved payment methods. Last-four and identity redacted by default. Does not charge. |
| rappi_add_to_cartC | Gated write. Requires RAPPI_ALLOW_MUTATIONS=true AND explicit_user_intent=true. Does not checkout. |
| rappi_update_cart_itemD | Gated write. RAPPI_ALLOW_MUTATIONS + explicit_user_intent required. |
| rappi_clear_cartC | Gated write. RAPPI_ALLOW_MUTATIONS + explicit_user_intent required. |
| rappi_set_active_addressC | Requires explicit_user_intent. Does not place an order. |
| rappi_set_payment_methodB | Gated payment write. RAPPI_ALLOW_MUTATIONS + explicit_user_intent. Guest tokens are rejected. Does not charge. |
| rappi_place_orderC | FAIL-CLOSED. Charges money. Requires RAPPI_ALLOW_MUTATIONS=true AND explicit_user_intent=true AND a personal (non-guest) token. Never runs in the default read-only config. |
| rappi_geocode_addressA | Resolve a lat/lng against unofficial users-address/address. Read-only. Street redacted by default. |
| rappi_create_addressB | Save a delivery address. Requires explicit_user_intent. Does not place an order. |
| rappi_update_addressC | Update a saved address. Requires explicit_user_intent. |
| rappi_delete_addressC | Delete a saved address. Requires explicit_user_intent. |
| rappi_list_active_ordersC | In-flight / active orders plus in-progress (unofficial user-order-home). Read-only. |
| rappi_get_order_etaC | ETA for one order. Read-only. |
| rappi_get_order_receiptC | Receipt for one order. Identity redacted by default. Read-only. |
| rappi_get_order_invoiceB | Invoice for one order. Identity redacted by default. Read-only. |
| rappi_get_order_statusC | Courier/order-status surface for one order. Read-only. |
| rappi_list_couponsC | Wallet coupons on unofficial user-order-home. Read-only. Does not apply a coupon. |
| rappi_checkout_previewC | Totals preview. Does not charge. Read-only. |
| rappi_homeC | Web home for the logged-in consumer. Read-only. |
| rappi_home_feedC | Dynamic home feed (web-gateway). Read-only. |
| rappi_browse_storesC | Web-gateway store list. Read-only. Complements rappi_search_stores. |
| rappi_browse_catalogC | Nearby store catalog (restaurant-bus). Read-only. Optional lat/lng. |
| rappi_recent_searchesC | Recent/top searches near a point. Read-only. |
| rappi_web_cartA | Alternate cart inspect via web-gateway. Street/phone/email/last-four redacted. Read-only. |
| rappi_reorderA | Rebuilds the cart from a past order. Gated cart write. Does not checkout. |
| rappi_cancel_orderB | Gated. May refund. Requires mutations and explicit_user_intent. Guest tokens rejected. |
| rappi_rate_orderC | Requires explicit_user_intent. Does not charge. |
| rappi_tip_orderB | FAIL-CLOSED. Charges a tip. Requires mutations, explicit_user_intent, and a personal token. |
| rappi_logoutA | Clears the local token file. Requires explicit_user_intent. Not gated by RAPPI_ALLOW_MUTATIONS. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/davidmosiah/rappi-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server