Loewen Menu Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Loewen Menu Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP (Model Context Protocol) server for the Löwen Menü IBS5 school-lunch ordering system. Lets an LLM browse weekly menus, manage a shopping cart, and place meal orders via the IBS5 web portal at ibs.loewen-menue.de.
# Clone and install
git clone https://github.com/yourusername/loewen-menu-mcp.git
cd loewen-menu-mcp
uv syncCredentials are passed via the PROFILES environment variable:
PROFILES=child1:CUSTOMER_ID:PASSWORDFor multiple children:
PROFILES=child1:S000001:1234,child2:S000002:5678If only one profile is configured, it is used as the default and the profile parameter can be omitted from all tool calls.
Add to your Claude Desktop MCP config (~/.claude/settings.json or a project-level MCP file):
{
"mcpServers": {
"loewen-menu": {
"command": "/bin/bash",
"args": ["-c", "cd /path/to/loewen-menu-mcp && uv run server.py"],
"env": {
"PROFILES": "child1:S000001:1234,child2:S000002:5678"
}
}
}
}| Tool | Description |
|---|---|
list_profiles | List configured profiles (children) |
get_weekly_menu | Browse meals for a given calendar week |
get_order_history | View past orders (filterable by days back and search text) |
get_cart_status | Check shopping cart contents and balance |
add_to_cart | Add a meal to the cart (does not finalize the order) |
confirm_order | Finalize and submit all items in the cart |
remove_meal | Remove a meal from the cart |
get_weekly_menu — see what's availableadd_to_cart — add meals (repeat for each day/meal)get_cart_status — verify the cartconfirm_order — submit the orderThe server authenticates to IBS5 using a Base64-encoded Bearer token built from the customer ID and password. Credentials are configured server-side via environment variables and never pass through the LLM.
Weekly menus and order history are scraped from server-rendered HTML pages. Cart operations and order confirmation use JSON API endpoints.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.