nemlig-mcp

Unofficial local MCP for nemlig.com, danish delivery service

Built as a thin layer over nemlig_cli, which already solves the hard parts: the three-step XSRF/bearer/login flow, the cookie-backed session, the two different API hosts, and the GetAsJson endpoints. This package adds a token-refresh loop, a privacy filter, and a curated tool surface.

Tools

Related MCP server: MCP Picnic

What this server deliberately cannot do

It cannot place an order or read your payment cards. Nemlig's API exposes POST /webapi/Order/PlaceOrderLoggedIn (which charges a saved card) and GET /webapi/Checkout/GetCreditCards. nemlig_cli implements neither, and this server does not add them.

The tool surface is an allowlist, not a filtered view of the whole API, so an endpoint cannot become reachable by accident. A test asserts this (tests/test_server.py). add_to_basket is the only tool that changes state, and filling a basket is reversible on the website.

Privacy

Basket and order responses embed the account holder's name, street address and phone number. Everything a tool returns lands in the model's context and in the conversation transcript, so those fields are replaced with a marker before they leave the server. See privacy.py.

Setup

Clone alongside the CLI — pyproject.toml expects it as a sibling:

code/
├── nemlig_cli/
└── nemlig-mcp/

git clone https://github.com/eisbaw/nemlig_cli.git
git clone https://github.com/kraenhansen/nemlig-mcp.git
cd nemlig-mcp && uv sync

Credentials come from NEMLIG_USER / NEMLIG_PASS, falling back to the CLI's ~/.config/nemlig/login.json.

Register with Claude

claude mcp add nemlig -- uv --directory /absolute/path/to/nemlig-mcp run nemlig-mcp

Or in .mcp.json:

{
  "mcpServers": {
    "nemlig": {
      "command": "uv",
      "args": ["--directory", "/absolute/path/to/nemlig-mcp", "run", "nemlig-mcp"],
      "env": { "NEMLIG_USER": "you@example.com", "NEMLIG_PASS": "..." }
    }
  }
}

Notes on the upstream CLI

Two things this package works around, both worth fixing upstream:

1. Progress spinners write to stdout, including from a background thread in login(). On a stdio MCP server stdout is the JSON-RPC transport, so every CLI call is wrapped in a redirect (_compat.py). Fix: print progress to stderr.

2. Optional dependencies are declared as required. opencv-python, pyzbar, Pillow, anthropic, google-api-python-client and openfoodfacts are all guarded with try/except ImportError in the code, but listed as hard dependencies, so installing the CLI as a library pulls in all of them. Fix: move them to [project.optional-dependencies].

Development

uv run pytest

The tests make no network calls and need no credentials.

Disclaimer

Not affiliated with nemlig.com. Uses a private API that may change or break, and automated access may conflict with their terms of service.

License

MIT