Toasttab Mcp

io.github.chrischall由 GitHub 账号 chrischall 发布v1.1.1更新于 Nov 5, 2026

Toast restaurants and menus: find places that order via Toast, read online or register menus.

已验证STDIO仅桌面位置与生活商业与电商

概览

AI 生成的概览

只读的 Toast 顾客端工具:查找支持 Toast 下单的餐厅、读取菜单,并通过已登录的浏览器查看自己的订单记录、积分和 Toast Cash。

可以做什么
  • 按经纬度查找附近的 Toast 餐厅,并把链接、短链接或 GUID 解析为餐厅 GUID
  • 读取餐厅的线上下单菜单、完整收银菜单或两者合并,支持搜索、缺货过滤和数量限制
  • 列出你的 Toast 订单记录,并获取单笔历史订单的收据,含商品、税费、小费和支付信息
  • 读取你的会员积分余额与奖励进度,以及 Toast Cash 余额和到期情况
  • 对 Toast 下单网关执行只读 GraphQL 查询,并用健康检查诊断桥接连接
适用场景
适合让助手回答 Toast 外卖或配送选择、比较线上与店内菜单,或查询自己的历史订单、奖励和 Toast Cash 余额,而无需离开对话。
运行要求
通过 npx 在本地运行,需要 Node 22 或更高版本。需要安装 ContextMint Bridge 浏览器扩展并保持一个 order.toasttab.com 标签页打开;账户类工具还需已登录的 toast.app 标签页。可选变量:TOAST_WS_PORT、FETCHPROXY_WS_HOST、FETCHPROXY_IDENTITY_DIR。服务器本身不配置任何凭据。
安装前请注意
扩展会要求你批准配对,并为账户类工具读取 toast-customer-access cookie,你的 Toast 会话会经由浏览器中转。该项目由 AI 开发且未经人工审计,使用前请审阅代码和工具权限。工具均为只读,不会下单,但已保存的支付方式和账户资料被刻意排除在外。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Toasttab Mcp,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Toast MCP

[CI] [npm] [license]

A Model Context Protocol server that connects Claude to the diner side of Toast. It finds restaurants that take orders through Toast and reads their menus, and, when you are signed in to toast.app, reads your own order history, loyalty programs and Toast Cash.

[!WARNING] AI-developed project. Claude Code built this codebase and maintains it, and no human has audited the implementation. Review the code and tool permissions before you use it.

What you can do

  • "Which restaurants near me can I order takeout from on Toast right now?"
  • "What's on the menu at https://order.toasttab.com/online/…? Anything vegetarian under $12?"
  • "Is the oat-milk latte at that café out of stock today?"
  • "Compare the online menu with the full in-store menu."
  • "What did I order from that Thai place last week, and what did it cost?"
  • "How close am I to a reward at my coffee shop? What's my Toast Cash balance?"

How it works

Toast's diner-facing sites (order.toasttab.com) and its ordering GraphQL gateway (ws-api.toasttab.com/do-federated-gateway) sit behind Cloudflare. Cloudflare refuses server-side clients: it serves a challenge page, or the gateway answers {"errors":[{"message":"Forbidden"}]}. This server therefore makes no direct requests. Every call goes through your own browser via the ContextMint Bridge extension, using @fetchproxy/server on 127.0.0.1:37149. You pass any "verify you are human" check yourself, in your own tab. Nothing is bypassed.

Tools

ToolWhat it does
toast_find_restaurantsRestaurants near a latitude/longitude that are open for takeout (or delivery) at a given time, nearest first. Each result includes its GUID, shortUrl, ordering link, address and distance.
toast_resolve_restaurantTurns a Toast link, shortUrl or GUID into the restaurant GUID that toast_get_menu needs.
toast_get_menuReads the online-ordering menu, the full register (POS) menu, or both merged. Supports search, out-of-stock filtering and a limit.
toast_list_ordersYour order history, newest first: restaurant, time, dining option, status, items and total. Pages with next_page_token.
toast_get_orderOne past order as a receipt: items with modifiers, subtotal, tax, tip, service charges, payments and delivery details.
toast_get_loyaltyYour restaurant loyalty programs: balances and progress toward the next reward.
toast_get_walletYour Toast Cash: balance, next expiry, expiring units and received units (gifts name the sender).
toast_graphqlRuns a read-only GraphQL query against the gateway, for exploring data the other tools don't cover. Mutations are refused.
toast_healthcheckRound-trips the bridge and gateway, and names the hop that failed.

All of these tools are read-only. None of them places an order, touches a cart, redeems a reward or changes your account. The four account tools (toast_list_orders, toast_get_order, toast_get_loyalty, toast_get_wallet) work only while you are signed in to toast.app in the bridged browser.

What is verified and what isn't

The operations behind the dedicated tools (nearbyRestaurants, menusV3 and restaurantV2ByShortUrl) were live-verified on 2026-10-24 through a bridged browser. Menu prices are in dollars, and both TAKE_OUT and DELIVERY work. The gateway only answers requests that carry a guest session, which the server mints itself from an order.toasttab.com page through your browser, so you don't need to do anything beyond keeping that tab open.

The account tools run Toast's own guest-app queries (copied verbatim from toast.app's bundle), and every shape they parse was captured live and kept, scrubbed, as a test fixture. They authenticate with your toast.app access token, which the bridge reads from that one cookie for each call. The server never refreshes the token (refreshing rotates it and would sign your browser out), so if it has lapsed you'll be asked to reload toast.app. Saved payment methods and the account profile are deliberately not exposed.

Install

  1. Install the ContextMint Bridge extension from its releases page. Chrome takes the unpacked zip.
  2. Open any restaurant's ordering page on https://order.toasttab.com and leave the tab open. It relays the API calls. For the account tools, also keep a signed-in https://toast.app tab open.
  3. Add the server to your MCP client:
json
{  "mcpServers": {    "toast": { "command": "npx", "args": ["-y", "toasttab-mcp"] }  }}

Node 22 or later is required. No credentials are configured here. On first run, the extension asks you to approve the pairing. It lists toasttab.com and toast.app, and a read of the toast-customer-access cookie for the account tools.

Configuration (all optional)

VariableDefaultPurpose
TOAST_WS_PORT37149Bridge WebSocket port
FETCHPROXY_WS_HOST127.0.0.1Bridge bind interface (hosted setups only)
FETCHPROXY_IDENTITY_DIR~/.fetchproxy/identity/Bridge identity keypair location

Troubleshooting

Run toast_healthcheck first.

  • "Forbidden" or "edge … refused": your browser hasn't passed Toast's Cloudflare check yet. Open order.toasttab.com, let it load (complete any check), then retry.
  • "No order.toasttab.com tab is open": open any order.toasttab.com/online/<restaurant> page in the browser that runs the extension.
  • "not signed in" / "sign-in has expired" (account tools): open or reload toast.app and sign in, then retry.
  • Directory comes back empty at night: nearbyRestaurants lists only restaurants open at when. Pass a daytime when.

Acknowledgement of terms

This server reaches Toast as you, through your browser, so Toast's guest terms of service govern how you use it. The maintainer has not reviewed those terms against this use. Read them yourself before you rely on this server. The project is not affiliated with or endorsed by Toast, Inc. It is for personal use: don't use it to bulk-harvest restaurant data.

Development

bash
npm installnpm test        # typecheck + vitest (all mocked, no network)npm run build   # typecheck + esbuild bundle → dist/bundle.js

License

MIT

来源:README.md,提交 f96e17c

工具

9

toast_find_restaurants

Find restaurants that take orders through Toast near a point (latitude/longitude — this server has no geocoder, so convert an address or city first). Returns each restaurant's GUID (what toast_get_menu needs), shortUrl, ordering link, address and distance, nearest first. Toast's directory lists restaurants OPEN for the dining option at `when` (default now): an empty or short result late at night means closed, not absent — retry with a daytime `when`. Optional `name` filters the results. There is no paging: `total` is every match and `limit` (default 25, max 300) is how many come back.

输入参数nameviewwhenlimitlatitude必填longitude必填radius_milesdining_option

toast_resolve_restaurant

Turn a Toast link, shortUrl, or GUID into the restaurant GUID that toast_get_menu needs. Links that carry a GUID (toast.app r-<guid> links, ?guid= parameters, bare GUIDs) resolve without a network call; an order.toasttab.com/online/<shortUrl> link or bare shortUrl is looked up in Toast by its slug. Returns guid: null with a next step when Toast does not know the slug.

输入参数reference必填

toast_get_menu

Get a Toast restaurant's menu: menus → groups → items with name, description, price, per-size prices and out-of-stock flag. `restaurant` is a GUID or any link that contains one (use toast_resolve_restaurant for a bare shortUrl). `source`: "online" (default) is what the restaurant sells through online ordering; "pos" is the register's full menu (often far larger); "both" merges them: an item on both menus is listed from the online menu with `sources` ["online","pos"]. An item filed under several groups ("Popular" plus its own category, say) appears under each, so `total_items` counts listings, not distinct items; dedupe by `guid` for a count. `query` searches item names, descriptions and group names. Prices are in dollars (12.5 = $12.50, checked against the ordering page). Modifier/option prices are not included.

输入参数viewlimitquerysourcerestaurant必填include_out_of_stock

toast_graphql

Run a read-only GraphQL QUERY against Toast's online-ordering gateway (ws-api.toasttab.com/do-federated-gateway) through your signed-in browser, and return its raw data and errors. For exploring fields the dedicated tools don't cover yet. Mutations and subscriptions are refused. Known-good operations: nearbyRestaurants(input:{diningOption,fulfillmentDateTime,latitude,longitude,radius}) and menusV3(input:{restaurantGuid,visibility}). Validation errors name the fields the schema lacks — use them to correct the query rather than guessing repeatedly.

输入参数query必填variablesoperation_name

toast_list_orders

Your Toast order history, newest first: each order's GUID, restaurant (GUID, name, ordering link), when it was placed (ISO-8601 UTC, plus the restaurant's time zone), dining option and status as Toast reports them, item count with the first few items, and total in dollars. Pass next_page_token from the previous answer for older orders. Use toast_get_order for a full receipt. Needs a toast.app sign-in in the browser running ContextMint Bridge.

输入参数viewpage_sizenext_page_token

toast_get_order

One of your past Toast orders as a receipt: items with modifiers and price, subtotal, discounts, tax, tip, service charges, gift card applied, total (all dollars), payments (type, card brand, last 4), and delivery address/provider when it was delivered. Takes the restaurant and order GUIDs from toast_list_orders. Needs a toast.app sign-in in the browser running ContextMint Bridge.

输入参数vieworder_guid必填restaurant_guid必填

toast_get_loyalty

Your Toast restaurant loyalty programs: for each, the restaurant, program name, balances (e.g. POINTS), and reward progress (target, left to target, whether a reward is available, Toast's own reward messages). Needs a toast.app sign-in in the browser running ContextMint Bridge.

输入参数view

toast_get_wallet

Your Toast Cash: the available balance (stored value such as gifted Toast Cash included), the next expiry, the units that expire, and the units you have received (gifts name the sender). All amounts in dollars. Needs a toast.app sign-in in the browser running ContextMint Bridge.

输入参数view

toast_healthcheck

Verify the ContextMint Bridge connection end-to-end

Round-trips a small public ws-api.toasttab.com URL (/do-federated-gateway/v1/graphql?query=%7B__typename%7D) through ContextMint Bridge (your signed-in browser tab) and returns diagnostics: the bridge's role (host/peer/null), port, version, the extension link (linked / pair pending / not attached / never answered), the elapsed round-trip time, and a plain-English hint distinguishing 'bridge never came up' from 'extension not connected' from 'this browser can't serve a capability' from 'real ws-api.toasttab.com-side problem'. Read-only, no auth required. Call this when a real tool fails and you want to know which hop broke.

无需输入参数。

版本历史

3
  1. v1.1.1最新Nov 4, 2026
  2. v1.0.1Oct 29, 2026
  3. v1.0.0Oct 25, 2026

评分

已满足适用检查项的 90%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分
  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分