Zé Delivery MCP

Unofficial. Not affiliated with, endorsed by, or supported by Zé Delivery or Ambev. The consumer GraphQL at api.ze.delivery/public-api can change without notice.

Never pays by default. ze_place_order and ze_cancel_order do nothing unless ZE_ALLOW_MUTATIONS is enabled and explicit_user_intent is true. Guest tokens cannot charge. Street, phone, email and GPS/latlng polylines are redacted.

Setup in 60 seconds

npx -y ze-mcp-unofficial setup
npx -y ze-mcp-unofficial auth --from-header "Bearer eyJ…"
npx -y ze-mcp-unofficial doctor

Token is not OAuth. Capture a consumer request to api.ze.delivery → copy the Authorization header. Catalog/search still run without a token; pay tools stay blocked.

Stdio snippet (Claude Desktop, Cursor, Grok Bot). Do not set mutations in the snippet:

{
  "mcpServers": {
    "ze": {
      "command": "npx",
      "args": ["-y", "ze-mcp-unofficial"]
    }
  }
}

See examples/claude-desktop.json and examples/grok-bot.md.

Related MCP server: Texas Grocery MCP

Skill or MCP

Same package, two doors. MCP registers tools on stdio/HTTP. The skill is the workflow (search → stop before order) and can drive the same tools through the CLI when the client has no MCP:

npx -y ze-mcp-unofficial call ze_search --json '{"query":"brahma"}'

Gates are identical. Copy skill/SKILL.md into your agent skills dir (~/.agents/skills/ze/ or Claude/Grok equivalent).

Tools

HTTP (optional, loopback)

Default transport is stdio. Streamable HTTP binds 127.0.0.1 and checks Origin against http://127.0.0.1:<port> (override with ZE_MCP_ALLOWED_ORIGIN). This is DNS-rebinding mitigation, not a public server.

npx -y ze-mcp-unofficial --http
# GET  http://127.0.0.1:3000/health
# POST http://127.0.0.1:3000/mcp

Security

Tokens live in ~/.ze-mcp/tokens.json (0600). They are not in git, the npm tarball, or default examples. Full notes: SECURITY.md. Agents: llms.txt.

Tests

npm test

No live Zé login required.