Skip to main content
Glama

cines-mx-mcp

A personal MCP server that lets an assistant look up movie listings and buy tickets at Mexican cinema chains. Cinépolis is supported first; the provider interface leaves room for Cinemex.

It is built for one person, low volume, human-like use: no premiere sniping, no resale, no scraping at scale.

Not affiliated with Cinépolis. It talks to the same endpoints the public cinepolis.com web app uses; they are undocumented and can change at any time. When a response no longer matches the expected shape, the server reports CINES_SCHEMA_CHANGED instead of guessing.

Status

Phase

What

State

0

Research + capture

done

1

Read tools (cinemas, listings, showtimes, upcoming, best showtime)

done

2a

Seat map PNG, seat proposal, validation

done

2b

Automated login, seat hold/release

next

3

Purchase (PayPal first), approvals, 3DS relay

planned

Docs: hub integration · Mac runbook

Related MCP server: Movie Booking MCP Server

Quick try

npm ci
npx tsx src/cli.ts probe                                  # checks each Cinépolis operation
npx tsx src/cli.ts listings cinepolis-parque-toreo-cdmx tomorrow
npm run dev                                               # MCP on http://127.0.0.1:8686/mcp

Safety rules (read before contributing)

  • Never commit HAR files, cookies, tokens, the x-apikey, card data, e-mail addresses, names, or screenshots containing personal data. .gitignore blocks the usual paths and npm run check-secrets scans everything git would commit; the pre-commit hook runs it automatically.

  • Captures live outside the repo (for example ~/cines-capture/). Redact them before analysis or before turning anything into a test fixture:

    CINES_REDACT_LITERALS="Firstname,Lastname" npm run redact -- ~/cines-capture/flow.har
    # -> ~/cines-capture/flow.redacted.har (refuses to write inside a git repo)

    Header and cookie names and attributes (expiry, HttpOnly…) are kept; values become salted hash markers such as [COOKIE:1a2b3c4d], so equal values still correlate within one run. JWTs, bearer tokens, e-mails, Luhn-valid card numbers, phone numbers and long opaque tokens are scrubbed from URLs, headers and bodies; third-party tracker payloads are dropped.

  • Private literals (your name, the live API key) can be checked without committing them: CINES_SECRET_LITERALS="..." npm run check-secrets.

  • The MCP server only binds to 127.0.0.1.

  • The purchase step is a deterministic script; the language model never drives the payment page, and payment secrets never enter its context or the logs.

Development

npm install
git config core.hooksPath .githooks   # enable the secret-scanning pre-commit hook
npm run check                         # typecheck + lint + tests + secret scan

Requires Node 22.13+.

License

MIT

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Provides a comprehensive movie booking experience for AMC Theatres, enabling users to discover movies, find showtimes, select seats, and process payments through conversational AI. Supports multi-location theater search with real-time seat availability and booking management.
    6
    1
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables users to query PVR/INOX cinema showtimes, live seat availability, and booking status across India, and to set up watch alerts for when shows become bookable or desired seats free up.
    -
  • A
    license
    A
    quality
    B
    maintenance
    Provides a comprehensive movie booking experience for AMC Theatres, enabling conversational AI assistants to help users discover movies, find showtimes, book seats, and process payments.
    6
    MIT