{
  "markdown": "# myhotlunchbox-mcp\n\nMCP server for [My Hot Lunchbox](https://www.myhotlunchbox.com) — read the\nschool lunch calendar, manage students, place and change orders, and track\ndeliveries and payments on a parent account.\n\n> Developed and maintained by AI (Claude Code). Use at your own discretion.\n\n## Install\n\n```sh\nnpx myhotlunchbox-mcp\n```\n\nOr as a Claude Code plugin:\n\n```sh\n/plugin marketplace add chrischall/myhotlunchbox-mcp\n/plugin install myhotlunchbox-mcp\n```\n\n## Configure\n\n```sh\nMYHOTLUNCHBOX_USERNAME=you@example.com\nMYHOTLUNCHBOX_PASSWORD=…\n```\n\nThat is the whole setup. The server performs a real server-side sign-in against\n`ordernow.myhotlunchbox.com` (OAuth2 password grant) and renews the session with\nthe refresh token it receives — **no browser extension, no signed-in tab, no\ncaptured cookie**. Nothing is written to disk.\n\n`MYHOTLUNCHBOX_BASE_URL` overrides the app origin if it ever moves.\n\nThe server boots without credentials so a host's install-time `tools/list` probe\nstill works; the configuration error surfaces on the first tool call.\n\n## Tools\n\n35 tools, all prefixed `mhlb_`. All 20 read tools are verified live against a real parent account (`node scripts/verify-reads.mjs`); the 14 write tools are not — see below.\n\n**Account** — `mhlb_whoami`, `mhlb_session_reset`\n\n**Health** — `mhlb_healthcheck` (is this connector working? reports whether the credential resolved, whether My Hot Lunchbox accepted it, and what to fix — unlike `mhlb_whoami`, which throws instead of answering)\n\n**Students** — `mhlb_list_students`, `mhlb_get_student_form`,\n`mhlb_new_student_form`, `mhlb_create_student`, `mhlb_update_student`,\n`mhlb_delete_student`\n\n**Calendar** — `mhlb_get_calendar`, `mhlb_get_day`\n\n**Ordering** — `mhlb_get_cart`, `mhlb_get_cart_tabs`, `mhlb_get_menu`,\n`mhlb_get_order_form`, `mhlb_get_order`, `mhlb_create_order`,\n`mhlb_update_order`, `mhlb_delete_order`\n\n**Billing** — `mhlb_list_transactions`, `mhlb_get_transaction`,\n`mhlb_list_subscriptions`, `mhlb_get_subscription_settings`,\n`mhlb_set_subscription_enabled`, `mhlb_unsubscribe_order`,\n`mhlb_list_gift_cards`, `mhlb_apply_gift_card`, `mhlb_get_coupon`,\n`mhlb_apply_coupon`, `mhlb_remove_coupon`\n\n**Checkout** — `mhlb_init_checkout`, `mhlb_checkout`\n\n**Reports** — `mhlb_print_calendar`, `mhlb_print_orders`,\n`mhlb_print_transaction`. These return real PDFs; each writes the file and\nreturns its path, or the bytes inline with `inline: true`. Set\n`MYHOTLUNCHBOX_OUTPUT_DIR` to choose where they land (defaults to the working\ndirectory); existing files are never overwritten.\n\n## Writes are confirm-gated\n\nEvery mutating tool takes `confirm`. Without `confirm: true` it makes **no**\nnetwork call and returns a dry-run preview of exactly what it would send.\n\n`mhlb_checkout` charges a real payment method. The server prices the charge from\n`orderIds`, so nothing client-side can bind the amount — there is no total in the\nrequest to check against. `expectedTotal` is therefore **attribution, not a\nguard**: you state what you expected, and it is recorded in the dry run and in\nthe result so an unexpected charge is traceable to the call that made it. What\nthe tool does refuse outright is paying a non-zero total with no `orderIds`.\n\n### Writes: shapes captured, acceptance unverified\n\n`npm run capture:writes` runs every mutating tool against a local proxy that\nforwards reads to the real service but answers writes itself, so the payloads\nare built from genuine server models and nothing happens upstream. It also\nproves all 13 refuse to send anything without `confirm: true`.\n\nWhat that established, and corrected: `mhlb_delete_order` and\n`mhlb_unsubscribe_order` take `{orderId, eventDate, studentId, isRepeated,\nisSubscribed}` — not the order model — and checkout takes\n`{orderIds, checkoutType, couponCode, giftCardCode, schoolDonations}`.\n\n**What is still unverified is whether the server accepts these bodies.** Shape\nis not acceptance; only a real write shows that, and none has been made. Inspect\nthe dry-run preview before confirming, and re-read afterwards — a `200` is not\nproof a write persisted.\n\nTwo limits on `mhlb_checkout` specifically:\n\n- It can only pay with a card **already saved** on the account. Paying with a\n  new card needs a Stripe token minted by Stripe.js in a browser, which no\n  server-side client can produce.\n- It generates an idempotency key and returns it. If a checkout fails\n  ambiguously, retry with that same `idempotencyKey` rather than a fresh call —\n  that is what stops a retry becoming a second charge.\n\n## Ordering is read-modify-write\n\nThere is no \"add item X\" call. Fetch the model, edit it, send it back whole:\n\n1. `mhlb_get_menu` — what is orderable for a student on a date\n2. `mhlb_get_order_form` — the order model to fill in\n3. `mhlb_create_order` — send it back (with `confirm: true`)\n4. `mhlb_init_checkout` → `mhlb_checkout` — price, then pay\n\nFields omitted from the payload are **cleared**, not preserved.\n\n## Shell skill\n\n`skills/myhotlunchbox` covers the same account from a shell with `curl` — no MCP\nprocess needed. Useful in scripts, or on a machine where this server is not\ninstalled.\n\n## Notes\n\n- `/deliveryInfo/*` and `/calendar/viewMatchedVendors` look parent-facing in the\n  compiled client but return `403` for a parent account — they belong to the\n  school/vendor dashboards. No tool wraps them.\n- Only the parent role is wired. The same API also serves school-admin and\n  vendor roles; those endpoints return `403`, which the client reports as a role\n  mismatch rather than a broken session.\n- `docs/MYHOTLUNCHBOX-API.md` records how the API was mapped and exactly what is\n  verified. `docs/api-surface.txt` is the full 359-endpoint extraction.\n\n## Licence\n\nMIT\n",
  "bytes": 5723,
  "sha": "189a87eb26203671969e837b749d131eed516ac3b05285f5686f8025be766e5f",
  "repo_slug": "chrischall/myhotlunchbox-mcp",
  "fonte": "repo",
  "truncated": false,
  "api": "https://agentalog.com/api/listings/mcp_io_github_chrischall_myhotlunchbox_mcp_5908787f/readme"
}