Thmenu

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Restaurant menus, carts, reservations and owner drafts for AI agents (Thmenu MCP).

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Thmenu": {
      "url": "https://mcp.thmenu.com/",
      "transport": "streamable-http"
    }
  }
}

Measured tools (27)

• get_pricing read-only

  Return Thmenu's commercial model as structured facts: free forever, every feature included, no subscription and no trial; the only charge is a platform fee in basis points on payment volume processed through Thmenu (the payment processor's own fee is separate); cash or external payments carry no Thmenu fee. Generated from the code that charges it — safe to cache.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• get_faq read-only

  Return the FAQ entries from the public /faq page in the requested locale (31 locales; unknown locale falls back to en and the response says which locale was served). Useful for grounding answers to common product questions.

  Parameters:

  • locale — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• get_restaurant read-only

  Fetch a public restaurant profile by slug: name, description, address/city/country, currency, timezone, phone, menu URL, opening hours (7 days, minutes from midnight; a close_minute above 1440 ends after midnight on the next day, e.g. 1560 = 02:00) with isOpenNow evaluated in the venue's own timezone (null when hours are unknown), owner-declared attributes (cuisine, dietary, …; null = not declared, never "no"), derived channels (order · reservation · pickup · delivery), policies derived from the venue's settings (ordering accepted / holiday mode / staff approval / payment timing / scheduled orders, takeaway & delivery ETA and fees, reservation party cap, table calls, tip cap), per-field owner verification timestamps, categories and product count, and `graph` — the canonical Restaurant Graph node's agent fields: verification state (UNCLAIMED · CLAIMED · SUSPENDED · HIDDEN; VERIFIED only when a human verified it), channel_states (each channel true/false/null with a reason — null means unknown, never "no"; TABLE_AVAILABLE only from tables staff confirmed ready), menu languages with coverage, and payment availability. Only restaurants opted into the public directory are visible.

  Parameters:

  • slug (required) — string — Restaurant slug, e.g. lily-rose-bistro

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• search_products read-only

  Search products inside a single restaurant by keyword. Returns up to 20 matching products with name, description, price, allergen tags, and the deep-link URL. Restaurant must be in the public directory.

  Parameters:

  • slug (required) — string — Restaurant slug.
  • query (required) — string — Free-text search across name + description.
  • limit — integer
  • locale — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• list_public_menus read-only

  List restaurants that have opted into the public directory (directory_opt_in = 1 — the same flag the owner sets under "AI visibility"). Returns slug, name, city, country, and the menu URL. Paginated.

  Parameters:

  • page — integer
  • limit — integer

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• search_restaurants read-only

  Search the public directory (opt-in venues only) by location, opening status, cuisine, dietary options, declared attributes, ordering channel, declared price level and menu language — and, right now, a free table or an open waitlist (the restaurant graph's channel states). Neutral ranking (AI-K6): distance in 0.5 km bands when `near` is given → availability (open now first; unknown hours before closed; a venue in holiday mode counts as closed) → profile freshness (owner-verified within 90 days first) → name. Payment to Thmenu never affects order. Cuisine, dietary, price level and other attributes are owner declarations, not verified facts; venues without a declaration are excluded only when an attribute or price filter is used, and venues without coordinates only when `near` is used. Returns slug, name, city, country, distance_km, is_open_now (serve-time, in the venue's own timezone; null when hours are unknown; false while the venue is in holiday mode), channels (order · reservation · pickup · delivery), declared attributes, freshness and the menu URL. Paginated.

  Parameters:

  • q — string — Free text over name and description (min 2 chars).
  • city — string
  • near — object — Search centre. Venues without coordinates are excluded when set.
  • page — integer
  • limit — integer
  • channel — string — order = digital ordering at the table; reservation; pickup = takeaway; delivery = venue's own delivery.
  • country — string — ISO 3166-1 alpha-2
  • cuisine — array — All listed cuisines must be declared by the venue.
  • dietary — array — Owner declaration, not a certification.
  • open_now — boolean — Only venues open right now in their own timezone; venues with unknown hours are excluded when true.
  • waitlist — boolean — Only venues whose waitlist is open now (WAITLIST_AVAILABLE): the reservations switch, which also opens the waitlist, and the venue open now — not in holiday mode.
  • price_max — integer — Owner-declared price level 1–4 (schema.org priceRange "$" … "$$$$"): venues at or below it. Venues that declared no level are excluded when set.
  • radius_km — number
  • attributes — array — Any declared attribute token (meals, family, outdoor, accessibility, cuisine, dietary).
  • menu_language — string — The menu can be read in this language: it is the menu's source language, or at least 90 % of the guest menu's dish names are translated into it (the restaurant graph's rule).
  • table_available — boolean — Only venues open now with a table that staff marked ready on the live table board (TABLE_AVAILABLE). Venues not using the board are excluded: unknown is not "available".

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• start_order_session

  Open a 30-minute transactional window for an AI agent against a specific restaurant. Returns an agent_session_id you MUST pass to every downstream order tool (place_order, cancel_order, request_bill, waiter_call, apply_promo). Also returns the customer-facing confirmation URL — share it with the human so they can review the cart before checkout.

  Parameters:

  • restaurant_id (required) — string — Canonical restaurant id from get_restaurant or search_products.

  Hints: read-only no · destructive no · idempotent no · open-world no

• place_order

  Place an order against the agent_session_id from start_order_session. Atomically inserts the order + items, applies server-side canonical pricing + tax (do NOT trust the unit_price you compute — we re-read it from D1), decrements inventory and optionally redeems a promo code. The guest pays at the venue (payment_status 'unpaid'). At a venue that takes payment before preparing (pay_first: true) the order is held as 'awaiting' and payment_url is returned: give it to the guest — they pay on the restaurant's own checkout, exactly like a guest ordering from the table; the kitchen gets the order once it is paid, and an unpaid order expires. This tool never charges anything itself. Returns order_id, total_cents (tax-inclusive), currency, promo_discount and, when pay_first, payment_url. Idempotency-Key header REQUIRED.

  Parameters:

  • agent_session_id (required) — string
  • items (required) — array
  • note — string — Optional order-level note (max 500 chars).
  • table_id — string — Optional table id when ordering at a table.
  • guest_name — string — Optional guest name shown to staff with the order.
  • order_type — string — Channel: 'dine_in' (default — at a table) or 'takeaway' (pickup; requires customer_name + customer_phone, ignores table_id, only when the restaurant has takeaway enabled — else channel_not_available). Delivery is not offered to agents.
  • promo_code — string — Optional promo code to redeem at order time (validate first with apply_promo). The redemption slot is consumed only when this order lands.
  • customer_name — string — Required for takeaway — who picks the order up.
  • customer_phone — string — Required for takeaway — reachable phone (digits, +, spaces/dashes tolerated).

  Hints: read-only no · destructive no · idempotent yes · open-world no

• cancel_order destructive

  Cancel an order placed via the same agent_session_id. Atomic — only succeeds while the order is still in "pending" or "confirmed" (the early KDS-accept state). Once the kitchen starts preparing, you must escalate to waiter_call. Idempotent: replays return the original outcome. Idempotency-Key header REQUIRED.

  Parameters:

  • agent_session_id (required) — string
  • order_id (required) — string

  Hints: read-only no · destructive yes · idempotent yes · open-world no

• get_order_status read-only

  Poll the current status of an order. Returns status, prepared_items_count, total_items_count, eta_minutes (if available), and an optional customer-facing message. Safe to call every 30 seconds; do NOT poll faster.

  Parameters:

  • agent_session_id (required) — string
  • order_id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• request_bill

  Ask the venue to bring the bill for a table. INSERTs a bill_requests row + fires the admin push notification. The split_type defaults to "full"; pass "personal" for German-style per-device splits.

  Parameters:

  • agent_session_id (required) — string
  • table_id (required) — string
  • note — string
  • split_type — string

  Hints: read-only no · destructive no · idempotent no · open-world no

• waiter_call

  Flag a waiter to the table. INSERTs a waiter_calls row + fires the admin push notification. Pass an optional human-readable message (max 500 chars) the staff sees in the dashboard.

  Parameters:

  • agent_session_id (required) — string
  • table_id (required) — string
  • message — string

  Hints: read-only no · destructive no · idempotent no · open-world no

• get_restaurant_menu read-only

  Fetch the full public menu for a restaurant — categories, products, prices, allergens, nutrition. Use this to build the cart you pass to place_order. PUBLIC tool, no auth required. `allergen_codes` are EU 1169/2011 Annex II keys (gluten, crustaceans, eggs, fish, peanuts, soy, milk, nuts, celery, mustard, sesame, sulphites, lupin, molluscs) given ONLY when the venue's allergen name matches the regulation list exactly; a venue-specific allergen appears in `allergens` without a code. Allergen lists come from the venue (or were AI-suggested and then saved by the venue where `allergen_disclosure.source` says so). `allergen_disclosure.as_of` is when the venue last edited the item record, not a verification date. Follow the top-level `disclosure.agent_instructions`; show `disclosure.text` to the guest in their language whenever an allergen or dietary question comes up; `dietary_flags` only ever warn (true) — null is unknown, never "free of".

  Parameters:

  • restaurant_id (required) — string
  • locale — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• check_loyalty read-only

  Look up a loyalty member by member_id. Returns balance, tier, lifetime_points, and the most recent 10 transactions so the agent can ground its recommendation ("you have 320 points, enough for a free coffee").

  Parameters:

  • agent_session_id (required) — string
  • member_id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• apply_promo read-only

  Validate a promo code (eligibility preview only — does NOT reserve a slot). Returns valid=true with discount info when the code is currently redeemable; pass the same code as place_order.promo_code to actually apply + redeem it (the slot is consumed only when the order lands).

  Parameters:

  • agent_session_id (required) — string
  • code (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• join_loyalty

  Loyalty sign-up for a guest. The guest must confirm their own e-mail, so joining happens on the restaurant's menu (My thmenu → Loyalty); this tool answers with that instruction and never reveals whether an e-mail or phone is already enrolled. Requires an active agent_session_id.

  Parameters:

  • agent_session_id (required) — string — Active session id from start_order_session.
  • email — string — Not used for a lookup; the guest confirms their e-mail on the menu.
  • phone — string — Not used for a lookup.
  • display_name — string — Not used.

  Hints: read-only no · destructive no · idempotent no · open-world no

• create_cart

  Build an anonymous takeaway or delivery cart for a listed restaurant and get a one-time confirmation link for the guest. PUBLIC tool, no auth. Table orders are not supported here (they stay on the QR menu). Send the guest to confirm_url. Prices are re-read there from the live menu; name, phone, delivery address and payment are entered by the guest on that page — never through this tool. Nothing is ordered until the guest confirms. The link expires 30 minutes after creation and can be used once.

  Parameters:

  • restaurant (required) — string — Restaurant slug (from search_restaurants / list_public_menus) or id.
  • order_type (required) — string
  • items (required) — array
  • note — string — Order-level note for the kitchen. Do not put the guest's name, phone or address here.
  • scheduled_for — string — ISO date-time for a scheduled pickup/delivery (optional; the venue may refuse on the confirmation page).

  Hints: read-only no · destructive no · idempotent no · open-world no

• get_cart read-only

  Read an anonymous cart by cart_id: state (open · consumed · expired), the one-time confirmation link while open, lines re-priced from the live menu, and the order id once the guest has confirmed. PUBLIC tool, no auth.

  Parameters:

  • cart_id (required) — string

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• get_reservation_slots read-only

  List bookable 30-minute reservation slots for the next 1–7 days (venue timezone) for a listed restaurant with a reservation module. busy_count is the number of existing requests at that slot and is informational. A reservation is a REQUEST that the restaurant confirms; no per-slot capacity cap is configured, so busy_count is informational only. Never tell the guest a table is guaranteed or "available" — say the request will be sent and the restaurant will confirm. PUBLIC tool, no auth.

  Parameters:

  • restaurant (required) — string
  • days — integer

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• request_reservation

  Create an anonymous reservation REQUEST (date-time, party size, note) for a listed restaurant and get a one-time confirmation link. PUBLIC tool, no auth. Send the guest to confirm_url: they enter their name and email or phone there and submit the request themselves — never through this tool. The restaurant then confirms or declines; the guest receives the confirmation code by email/SMS. A reservation is a REQUEST that the restaurant confirms; no per-slot capacity cap is configured, so busy_count is informational only. Never tell the guest a table is guaranteed or "available" — say the request will be sent and the restaurant will confirm.

  Parameters:

  • restaurant (required) — string
  • reserved_at (required) — string — ISO date-time; at least 30 minutes ahead, at most 90 days.
  • party_size (required) — integer
  • note — string — Occasion, seating preference, accessibility needs. Do not put the guest's name, phone or email here.

  Hints: read-only no · destructive no · idempotent no · open-world no

• cancel_reservation destructive

  Cancel a reservation using the 6-character confirmation code the GUEST received by email/SMS (the code is the authorisation; ask the guest for it — this tool never issues or reveals codes). Thin wrapper over the venue's own cancellation endpoint, which answers uniformly: `status` is "cancelled" or "noop" (unknown code · already cancelled · seated/completed · less than 30 minutes away — it does not say which). Only report a cancellation to the guest when `cancelled` is true. PUBLIC tool, no auth.

  Parameters:

  • confirmation_code (required) — string

  Hints: read-only no · destructive yes · idempotent yes · open-world no

• menu_audit read-only

  List the active products of your restaurant that lack a usable description, an image, or an allergen declaration. Read-only; nothing is changed.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• sales_summary read-only

  Order counts by status, order total sums, top products by quantity and busiest hours for the last 7 and 30 days of your restaurant. Read-only.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• reservation_summary read-only

  Reservation requests of your restaurant for the next 14 days grouped by day and status, with pending requests that still need an answer. Read-only; no guest contact details.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• draft_product_description

  Propose a new description for one of your products. Nothing goes live: the text is saved as a DRAFT change set the owner reviews, previews and publishes (or discards) in the admin panel.

  Parameters:

  • product_id (required) — string — Product id from menu_audit or get_restaurant_menu.
  • description (required) — string — Proposed description in the menu language. Plain text, no links, no claims you cannot verify.

  Hints: read-only no · destructive no · idempotent no · open-world no

• draft_site_text

  Propose the public website text of your restaurant — tagline, about paragraph, SEO title and SEO description — as a DRAFT change set. Only declared facts are allowed: no numbers, awards, links or markup; validation rejects anything else. The owner publishes from the admin panel.

  Parameters:

  • tagline (required) — string
  • about (required) — string
  • seo_title (required) — string
  • seo_description (required) — string

  Hints: read-only no · destructive no · idempotent no · open-world no

• draft_translation

  Propose a translation (name and/or description) of one product or category into one menu language. Nothing goes live: it is saved as a DRAFT change set the owner reviews and publishes in the admin panel; manual translations override machine translation once published.

  Parameters:

  • entity (required) — string
  • entity_id (required) — string — Product or category id from get_restaurant_menu / menu_audit.
  • locale (required) — string — Target menu language (two letters), different from the menu source language.
  • name — string — Translated name (optional). Keep brand names as they are.
  • description — string — Translated description (optional). Plain text, no links, same meaning as the source — never add ingredients or claims.

  Hints: read-only no · destructive no · idempotent no · open-world no

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.