Myhotlunchbox MCP server

myhotlunchbox-mcp

MCP server for My Hot Lunchbox — read the school lunch calendar, manage students, place and change orders, and track deliveries and payments on a parent account.

Developed and maintained by AI (Claude Code). Use at your own discretion.

Install

npx myhotlunchbox-mcp

Or as a Claude Code plugin:

/plugin marketplace add chrischall/myhotlunchbox-mcp
/plugin install myhotlunchbox-mcp

Configure

MYHOTLUNCHBOX_USERNAME=you@example.com
MYHOTLUNCHBOX_PASSWORD=…

That is the whole setup. The server performs a real server-side sign-in against ordernow.myhotlunchbox.com (OAuth2 password grant) and renews the session with the refresh token it receives — no browser extension, no signed-in tab, no captured cookie. Nothing is written to disk.

MYHOTLUNCHBOXBASEURL overrides the app origin if it ever moves.

The server boots without credentials so a host's install-time tools/list probe still works; the configuration error surfaces on the first tool call.

Tools

35 tools, all prefixed mhlb_. All 20 read tools are verified live against a real parent account (node scripts/verify-reads.mjs); the 14 write tools are not — see below.

The read claim carries a date because it can go stale with no tool file touched: an SDK or zod major re-plumbs every read path underneath it. Last re-run 2026-09-19 on 1.0.0 — the tree after the MCP SDK v2 migration and the forced zod 4.6.2 bump — 20/20 green.

Account — mhlbwhoami, mhlbsession_reset

Health — mhlbhealthcheck (is this connector working? reports whether the credential resolved, whether My Hot Lunchbox accepted it, and what to fix — unlike mhlbwhoami, which throws instead of answering)

Students — mhlbliststudents, mhlbgetstudentform, mhlbnewstudentform, mhlbcreatestudent, mhlbupdatestudent, mhlbdeletestudent

Calendar — mhlbgetcalendar, mhlbgetday

Ordering — mhlbgetcart, mhlbgetcarttabs, mhlbgetmenu, mhlbgetorderform, mhlbgetorder, mhlbcreateorder, mhlbupdateorder, mhlbdeleteorder

Billing — mhlblisttransactions, mhlbgettransaction, mhlblistsubscriptions, mhlbgetsubscriptionsettings, mhlbsetsubscriptionenabled, mhlbunsubscribeorder, mhlblistgiftcards, mhlbapplygiftcard, mhlbgetcoupon, mhlbapplycoupon, mhlbremovecoupon

Checkout — mhlbinitcheckout, mhlb_checkout

Reports — mhlbprintcalendar, mhlbprintorders, mhlbprinttransaction. These return real PDFs; each writes the file and returns its path, or the bytes inline with inline: true. Set MYHOTLUNCHBOXOUTPUTDIR to choose where they land (defaults to the working directory); existing files are never overwritten.

Writes are confirm-gated

Every mutating tool takes confirm. Without confirm: true it makes no network call and returns a dry-run preview of exactly what it would send.

mhlbcheckout charges a real payment method. The server prices the charge from orderIds, so nothing client-side can bind the amount — there is no total in the request to check against. expectedTotal is therefore attribution, not a guard**: you state what you expected, and it is recorded in the dry run and in the result so an unexpected charge is traceable to the call that made it. What the tool does refuse outright is paying a non-zero total with no orderIds.

Writes: shapes captured, acceptance unverified

npm run capture:writes runs every mutating tool against a local proxy that forwards reads to the real service but answers writes itself, so the payloads are built from genuine server models and nothing happens upstream. It also proves all 13 refuse to send anything without confirm: true.

Shortened. The full README is on GitHub.