io.github.Smartoire/paxaver-mcp

Official26 tools

by Smartoire · TypeScript

MCP adapter for the Paxaver school community platform. Streamable HTTP, OAuth 2.1, capability auth.

Paxaver MCP Adapter (io.github.Smartoire/paxaver-mcp)

The io.github.Smartoire/paxaver-mcp server is an MCP adapter for the Paxaver school community platform. It exposes Model Context Protocol (MCP) functionality on Cloudflare Workers and supports Streamable HTTP transport, OAuth 2.1, RS256 JWT validation, and capability-first authorization.

🛠️ Key Features

MCP adapter for the Paxaver school community platform
Runs on Cloudflare Workers
Streamable HTTP transport
OAuth 2.1
RS256 JWT validation
Capability-first authorization

🚀 Use Cases

Integrating Paxaver platform data with MCP-capable AI clients
Accessing Paxaver resources over Streamable HTTP
Using OAuth 2.1 and capability-based access control for authorized MCP requests

⚡ Developer Benefits

Capability-first authorization model for MCP access control
JWT (RS256) validation for authentication/verification
Streamable HTTP transport suitable for incremental responses

⚠️ Limitations

Documentation excerpt provided does not list specific MCP tools or supported operations.

Captured live from the server via tools/list.

get_my_context

Read-only lookup with no side effects - safe to call repeatedly. Requires authentication: returns only the caller's own context (never another user's data): first name, active school, the students they are a guardian for, and their role codes at that school. This is the context-discovery call - most other tools need a student_id or school_slug from here, and admin-role checks come from roles. Returns live account state, so call again if the user may have switched schools or had roles changed.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

get_my_wallet_balance

Read-only lookup - never moves funds or has side effects. Requires authentication: returns only the caller's spendable wallet balance at their active school (wallets are scoped per school, so a balance at one school does not apply elsewhere), in cents and formatted. Live value reflecting orders and refunds up to the current moment - recheck before assuming funds are still available. Call before pay_lunch_order_draft or register_for_event to confirm the user can cover the charge; not needed for read-only lookups.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

list_my_lunch_orders

Returns lunch orders already placed - items, menu date, status, and total - for the authenticated user's students, newest first (up to ~100 most recent). Filters combine with AND: student_id narrows to one student; menu_date and month narrow the date range, and if both are given menu_date wins. With no filters returns recent orders across all of the user's students. Admins (pac_cordinator, lunch_cordinator) see school-wide orders; parents only their own students. For what can be ordered (menu and prices), use get_lunch_menu.

Parameters3

student_id	string	optional	Filter to a specific student (must be your own student, from get_my_context; admins may filter any student in the school)
menu_date	string	optional	Single day to query, YYYY-MM-DD; omit when using month
month	string	optional	Calendar month to query, YYYY-MM; omit when using menu_date

Raw schema

{
  "type": "object",
  "properties": {
    "student_id": {
      "type": "string",
      "description": "Filter to a specific student (must be your own student, from get_my_context; admins may filter any student in the school)"
    },
    "menu_date": {
      "type": "string",
      "description": "Single day to query, YYYY-MM-DD; omit when using month"
    },
    "month": {
      "type": "string",
      "description": "Calendar month to query, YYYY-MM; omit when using menu_date"
    }
  },
  "additionalProperties": false
}

get_lunch_menu

Returns the orderable lunch menu for the user's active school - item names, prices, dietary tags, and remaining quantity. Pass date for a single day or month for a per-day listing across the whole month (today if neither is given); if both are passed, date wins. The menu_item_id values returned are required by create_lunch_order_draft. For orders already placed, use list_my_lunch_orders.

Parameters2

date	string	optional	Single day to show, YYYY-MM-DD; omit when using month
month	string	optional	Calendar month to show, YYYY-MM; omit when using date. Today is used when neither is given

Raw schema

{
  "type": "object",
  "properties": {
    "date": {
      "type": "string",
      "description": "Single day to show, YYYY-MM-DD; omit when using month"
    },
    "month": {
      "type": "string",
      "description": "Calendar month to show, YYYY-MM; omit when using date. Today is used when neither is given"
    }
  },
  "additionalProperties": false
}

create_lunch_order_draft

Creates an unpaid draft lunch order with one or more items - nothing is charged until pay_lunch_order_draft commits it. Use for multi-item orders or when the user should review the total first; each items entry pairs a menu_item_id with a quantity. The draft total is the sum of item prices times quantities plus nothing else until pay_lunch_order_draft. To change or abandon the draft, use update_lunch_order_draft or discard_lunch_order_draft. FINANCIAL - confirm student, items, and date before calling.

Parameters4

student_id	string	optional	Student ID (must be your own student; from get_my_context); required when the user has more than one student, defaults to their only student
school_slug	string	optional	School slug (from get_my_context); defaults to the active school
menu_date	string	required	Date the lunch is served, YYYY-MM-DD
items	array	required	Line items to order; get IDs and prices from get_lunch_menu

Raw schema

{
  "type": "object",
  "properties": {
    "student_id": {
      "type": "string",
      "description": "Student ID (must be your own student; from get_my_context); required when the user has more than one student, defaults to their only student"
    },
    "school_slug": {
      "type": "string",
      "description": "School slug (from get_my_context); defaults to the active school"
    },
    "menu_date": {
      "type": "string",
      "description": "Date the lunch is served, YYYY-MM-DD"
    },
    "items": {
      "type": "array",
      "description": "Line items to order; get IDs and prices from get_lunch_menu",
      "items": {
        "type": "object",
        "properties": {
          "menu_item_id": {
            "type": "string",
            "description": "Menu item ID from get_lunch_menu"
          },
          "menu_item_name": {
            "type": "string",
            "description": "Item display name from get_lunch_menu"
          },
          "price_cents": {
            "type": "integer",
            "description": "Unit price in cents from get_lunch_menu"
          },
          "quantity": {
            "type": "integer",
            "description": "Number of servings",
            "minimum": 1
          }
        },
        "required": [
          "menu_item_id",
          "menu_item_name",
          "price_cents",
          "quantity"
        ]
      }
    }
  },
  "required": [
    "menu_date",
    "items"
  ],
  "additionalProperties": false
}

pay_lunch_order_draft

Commits a draft order from create_lunch_order_draft and charges the wallet for the item total plus optional tip_cents (donated to the school's PAC). Wallet-only: if the balance cannot cover the full total, the call fails with an error directing the user to open the Paxaver panel and top up the wallet balance, then retry - no card payment is offered through this tool. Not for new orders - use create_lunch_order_draft first. FINANCIAL - confirm the total before calling.

Parameters2

order_id	string	required	Draft order ID from create_lunch_order_draft - must still be in draft status; already-finalized orders are rejected
tip_cents	integer	optional	Tip in cents (donated to school PAC)

Raw schema

{
  "type": "object",
  "properties": {
    "order_id": {
      "type": "string",
      "description": "Draft order ID from create_lunch_order_draft - must still be in draft status; already-finalized orders are rejected"
    },
    "tip_cents": {
      "type": "integer",
      "description": "Tip in cents (donated to school PAC)",
      "default": 0
    }
  },
  "required": [
    "order_id"
  ],
  "additionalProperties": false
}

update_lunch_order_draft

Replaces the items and/or menu_date of an unpaid draft order before it is finalized - the caller must own the draft and it must still be in draft status (order_id from create_lunch_order_draft). Pass the complete items list: it replaces the draft's items wholesale and the total is recomputed from price times quantity. Only draft orders can be updated; once finalized, use cancel_my_lunch_order. WRITE - confirm the new contents with the user.

Parameters3

order_id	string	required	Draft order ID from create_lunch_order_draft - must still be in draft status
items	array	optional	Replacement line items (menu_item_id from get_lunch_menu + quantity); replaces all existing items when provided
menu_date	string	optional	New date the lunch is served, YYYY-MM-DD

Raw schema

{
  "type": "object",
  "properties": {
    "order_id": {
      "type": "string",
      "description": "Draft order ID from create_lunch_order_draft - must still be in draft status"
    },
    "items": {
      "type": "array",
      "description": "Replacement line items (menu_item_id from get_lunch_menu + quantity); replaces all existing items when provided"
    },
    "menu_date": {
      "type": "string",
      "description": "New date the lunch is served, YYYY-MM-DD"
    }
  },
  "required": [
    "order_id"
  ],
  "additionalProperties": false
}

discard_lunch_order_draft

Permanently discards an unpaid draft order - the caller must own it and it must still be in draft status (order_id from create_lunch_order_draft). Nothing was ever charged, so there is no refund; the draft is simply deleted. For a finalized order use cancel_my_lunch_order instead. DESTRUCTIVE - confirm with the user before discarding.

Parameters1

order_id

string

required

Draft order ID from create_lunch_order_draft - must still be in draft status

Raw schema

{
  "type": "object",
  "properties": {
    "order_id": {
      "type": "string",
      "description": "Draft order ID from create_lunch_order_draft - must still be in draft status"
    }
  },
  "required": [
    "order_id"
  ],
  "additionalProperties": false
}

cancel_my_lunch_order

Cancels a finalized order and refunds the charge to the wallet. Only works before order labels have been sent; after that the request is rejected and the order stands. DESTRUCTIVE - confirm with the user before cancelling.

Parameters1

order_id

string

required

ID of a finalized order - from list_my_lunch_orders; the order must still be finalized and not yet have labels sent

Raw schema

{
  "type": "object",
  "properties": {
    "order_id": {
      "type": "string",
      "description": "ID of a finalized order - from list_my_lunch_orders; the order must still be finalized and not yet have labels sent"
    }
  },
  "required": [
    "order_id"
  ],
  "additionalProperties": false
}

list_school_events

Returns upcoming events for the user's active school: date, times, location, volunteer shifts, and whether registration is closed. The event IDs returned feed register_for_event; shift IDs feed sign_up_for_volunteer_shift. To review or undo your own registrations and signups, use list_my_event_registrations / cancel_my_event_registration and list_my_volunteer_signups / cancel_my_volunteer_signup. Optionally filter by date range.

Parameters2

start_date	string	optional	First day of the range, YYYY-MM-DD (inclusive); omit for all upcoming events
end_date	string	optional	Last day of the range, YYYY-MM-DD (inclusive); omit for all upcoming events

Raw schema

{
  "type": "object",
  "properties": {
    "start_date": {
      "type": "string",
      "description": "First day of the range, YYYY-MM-DD (inclusive); omit for all upcoming events"
    },
    "end_date": {
      "type": "string",
      "description": "Last day of the range, YYYY-MM-DD (inclusive); omit for all upcoming events"
    }
  },
  "additionalProperties": false
}

create_school_event

ADMIN: Creates a school event, optionally ticketed, at the active school. To change an existing event use update_school_event; to register a parent for an event use register_for_event. Requires pac_cordinator or event_cordinator role. WRITE - only create on explicit user request.

Parameters9

school_slug	string	optional	School slug (defaults to active school)
name	string	required	Event name shown to parents
description	string	optional	Optional event description
event_date	string	required	Event date, YYYY-MM-DD
starts_at	string	optional	Start time (e.g. 18:30)
ends_at	string	optional	End time (e.g. 20:00)
location	string	optional	Event location (e.g. Gymnasium)
max_capacity	integer	optional	Maximum attendees/tickets; omit for unlimited
ticket_price_cents	integer	optional	Ticket price in cents (0 = free)

Raw schema

{
  "type": "object",
  "properties": {
    "school_slug": {
      "type": "string",
      "description": "School slug (defaults to active school)"
    },
    "name": {
      "type": "string",
      "description": "Event name shown to parents"
    },
    "description": {
      "type": "string",
      "description": "Optional event description"
    },
    "event_date": {
      "type": "string",
      "description": "Event date, YYYY-MM-DD"
    },
    "starts_at": {
      "type": "string",
      "description": "Start time (e.g. 18:30)"
    },
    "ends_at": {
      "type": "string",
      "description": "End time (e.g. 20:00)"
    },
    "location": {
      "type": "string",
      "description": "Event location (e.g. Gymnasium)"
    },
    "max_capacity": {
      "type": "integer",
      "description": "Maximum attendees/tickets; omit for unlimited"
    },
    "ticket_price_cents": {
      "type": "integer",
      "description": "Ticket price in cents (0 = free)"
    }
  },
  "required": [
    "name",
    "event_date"
  ],
  "additionalProperties": false
}

update_school_event

ADMIN: Partially updates an existing school event - only the provided fields change; omitted fields keep their current values. Use for reschedules, capacity or price changes, and status transitions (cancelled/completed). Prefer cancel_school_event to cancel outright. Requires pac_cordinator or event_cordinator role. WRITE operation - confirm changes with the user. Get event_id from list_school_events.

Parameters10

event_id	string	required	Event ID - from list_school_events
name	string	optional	New event name
description	string	optional	New event description shown to parents
event_date	string	optional	Event date, YYYY-MM-DD
starts_at	string	optional	Start time (e.g. 18:30)
ends_at	string	optional	End time (e.g. 20:00)
location	string	optional	Event location (e.g. Gymnasium)
max_capacity	integer	optional	Maximum number of attendees/tickets
ticket_price_cents	integer	optional	Ticket price in cents; 0 for free events
status	string	optional	Event status - cancelled stops sales, completed closes the event

Raw schema

{
  "type": "object",
  "properties": {
    "event_id": {
      "type": "string",
      "description": "Event ID - from list_school_events"
    },
    "name": {
      "type": "string",
      "description": "New event name"
    },
    "description": {
      "type": "string",
      "description": "New event description shown to parents"
    },
    "event_date": {
      "type": "string",
      "description": "Event date, YYYY-MM-DD"
    },
    "starts_at": {
      "type": "string",
      "description": "Start time (e.g. 18:30)"
    },
    "ends_at": {
      "type": "string",
      "description": "End time (e.g. 20:00)"
    },
    "location": {
      "type": "string",
      "description": "Event location (e.g. Gymnasium)"
    },
    "max_capacity": {
      "type": "integer",
      "description": "Maximum number of attendees/tickets"
    },
    "ticket_price_cents": {
      "type": "integer",
      "description": "Ticket price in cents; 0 for free events"
    },
    "status": {
      "type": "string",
      "enum": [
        "active",
        "cancelled",
        "completed"
      ],
      "description": "Event status - cancelled stops sales, completed closes the event"
    }
  },
  "required": [
    "event_id"
  ],
  "additionalProperties": false
}

cancel_school_event

ADMIN: Cancels a school event outright; cancelled events cannot be reactivated. For schedule, capacity, or price changes use update_school_event instead. Requires pac_cordinator or event_cordinator role. DESTRUCTIVE - confirm with the user. Get event_id from list_school_events.

Parameters1

event_id

string

required

Event ID - from list_school_events; cancelling is permanent and cannot be undone

Raw schema

{
  "type": "object",
  "properties": {
    "event_id": {
      "type": "string",
      "description": "Event ID - from list_school_events; cancelling is permanent and cannot be undone"
    }
  },
  "required": [
    "event_id"
  ],
  "additionalProperties": false
}

register_for_event

Registers the authenticated user for a school event and issues tickets to the caller (quantity is the number of tickets bought for the caller, minimum 1 - there is no per-student split). For paid events quantity times the ticket price is charged to the user's wallet - the call fails on insufficient balance or when the event is sold out or registration is closed. To volunteer at an event rather than attend, use sign_up_for_volunteer_shift. FINANCIAL for paid events - confirm before registering.

Parameters2

event_id	string	required	Event ID from list_school_events - registration must still be open (check the closed flag)
quantity	integer	optional	Number of tickets

Raw schema

{
  "type": "object",
  "properties": {
    "event_id": {
      "type": "string",
      "description": "Event ID from list_school_events - registration must still be open (check the closed flag)"
    },
    "quantity": {
      "type": "integer",
      "description": "Number of tickets",
      "minimum": 1,
      "default": 1
    }
  },
  "required": [
    "event_id"
  ],
  "additionalProperties": false
}

list_my_event_registrations

Read-only, no side effects. Returns the authenticated user's own event tickets at their active school - ticket id, event name/date/location, quantity, total paid, and status (paid or checked_in). Cancelled tickets are excluded. The id values returned are required by cancel_my_event_registration. Pair with list_school_events for events the user has not registered for.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

cancel_my_event_registration

Cancels one of the authenticated user's own event tickets (ticket_id from list_my_event_registrations). Releases the reserved seats; for paid tickets the full amount is refunded to the user's wallet at that school. Only the ticket owner or a coordinator can cancel. DESTRUCTIVE - confirm with the user before cancelling.

Parameters1

ticket_id

string

required

Ticket ID from list_my_event_registrations - must belong to the caller and still be cancellable

Raw schema

{
  "type": "object",
  "properties": {
    "ticket_id": {
      "type": "string",
      "description": "Ticket ID from list_my_event_registrations - must belong to the caller and still be cancellable"
    }
  },
  "required": [
    "ticket_id"
  ],
  "additionalProperties": false
}

list_my_volunteer_signups

Read-only, no side effects. Returns the authenticated user's active volunteer signups at their school - signup id, shift title/date/times, and the parent event. Cancelled signups are excluded. The id values returned are required by cancel_my_volunteer_signup.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

cancel_my_volunteer_signup

Cancels one of the authenticated user's own volunteer signups (signup_id from list_my_volunteer_signups) and frees the shift slot for others. No payment is involved. Only the volunteer themselves or an admin can cancel. DESTRUCTIVE - confirm with the user before cancelling.

Parameters1

signup_id

string

required

Signup ID from list_my_volunteer_signups - must belong to the caller and still be active

Raw schema

{
  "type": "object",
  "properties": {
    "signup_id": {
      "type": "string",
      "description": "Signup ID from list_my_volunteer_signups - must belong to the caller and still be active"
    }
  },
  "required": [
    "signup_id"
  ],
  "additionalProperties": false
}

sign_up_for_volunteer_shift

Signs the authenticated user up for a specific volunteer shift - no payment involved. shift_id identifies one shift within an event, not the event itself: get it from the event's volunteer shifts in list_school_events. The call fails when the shift is full or cancelled. To attend an event as a guest instead, use register_for_event. WRITE - confirm with the user before signing up.

Parameters1

shift_id

string

required

Volunteer shift ID - from the event's volunteer shifts (list_school_events)

Raw schema

{
  "type": "object",
  "properties": {
    "shift_id": {
      "type": "string",
      "description": "Volunteer shift ID - from the event's volunteer shifts (list_school_events)"
    }
  },
  "required": [
    "shift_id"
  ],
  "additionalProperties": false
}

list_school_restaurants

ADMIN: Lists the active restaurants attached to a school (defaults to the active school). Inactive restaurants are not returned. The restaurant_id values returned are required by list_restaurant_menu_items, create_restaurant_menu_item, update_restaurant_menu_item, archive_restaurant_menu_item, and schedule_lunch_menu_item. Requires pac_cordinator, pac_member, or lunch_cordinator role.

Parameters1

school_slug

string

optional

School slug (defaults to active school)

Raw schema

{
  "type": "object",
  "properties": {
    "school_slug": {
      "type": "string",
      "description": "School slug (defaults to active school)"
    }
  },
  "additionalProperties": false
}

create_school_restaurant

ADMIN: Adds a restaurant to the active school so it can offer menu items via create_restaurant_menu_item. To change an existing restaurant there is no update tool - recreate or manage it in the Paxaver admin. Requires pac_cordinator role. WRITE - confirm with the user.

Parameters4

school_slug	string	optional	School slug - defaults to the active school
name	string	required	Restaurant display name
description	string	optional	Optional restaurant description
tax_percent	number	optional	Sales tax percentage applied to orders (e.g. 5 for 5%)

Raw schema

{
  "type": "object",
  "properties": {
    "school_slug": {
      "type": "string",
      "description": "School slug - defaults to the active school"
    },
    "name": {
      "type": "string",
      "description": "Restaurant display name"
    },
    "description": {
      "type": "string",
      "description": "Optional restaurant description"
    },
    "tax_percent": {
      "type": "number",
      "description": "Sales tax percentage applied to orders (e.g. 5 for 5%)"
    }
  },
  "required": [
    "name"
  ],
  "additionalProperties": false
}

list_restaurant_menu_items

ADMIN: Lists the full menu-item catalog for a restaurant, including inactive and unavailable items - this is the catalog, not what parents can order on a date (use get_lunch_menu for that). Provides menu_item_id values for update_restaurant_menu_item, archive_restaurant_menu_item, and schedule_lunch_menu_item. Requires pac_cordinator or lunch_cordinator role. Get restaurant_id from list_school_restaurants.

Parameters1

restaurant_id

string

required

Restaurant ID - from list_school_restaurants

Raw schema

{
  "type": "object",
  "properties": {
    "restaurant_id": {
      "type": "string",
      "description": "Restaurant ID - from list_school_restaurants"
    }
  },
  "required": [
    "restaurant_id"
  ],
  "additionalProperties": false
}

create_restaurant_menu_item

ADMIN: Creates a new menu item on a restaurant. Only restaurant_id and name are required - set price_cents before the item can be meaningfully ordered. New items start active and available; use update_restaurant_menu_item to change them later. Requires pac_cordinator or lunch_cordinator role. WRITE operation - confirm with the user. Get restaurant_id from list_school_restaurants.

Parameters7

restaurant_id	string	required	Restaurant ID - from list_school_restaurants
name	string	required	Item display name shown to parents
description	string	optional	Optional item description
cost_cents	integer	optional	Kitchen cost in cents (internal margin tracking)
price_cents	integer	optional	Sale price in cents (e.g. 550 = $5.50)
ingredients	array	optional	Ingredient list
calories	integer	optional	Calorie count

Raw schema

{
  "type": "object",
  "properties": {
    "restaurant_id": {
      "type": "string",
      "description": "Restaurant ID - from list_school_restaurants"
    },
    "name": {
      "type": "string",
      "description": "Item display name shown to parents"
    },
    "description": {
      "type": "string",
      "description": "Optional item description"
    },
    "cost_cents": {
      "type": "integer",
      "description": "Kitchen cost in cents (internal margin tracking)"
    },
    "price_cents": {
      "type": "integer",
      "description": "Sale price in cents (e.g. 550 = $5.50)"
    },
    "ingredients": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Ingredient list"
    },
    "calories": {
      "type": "integer",
      "description": "Calorie count"
    }
  },
  "required": [
    "restaurant_id",
    "name"
  ],
  "additionalProperties": false
}

update_restaurant_menu_item

ADMIN: Partially updates an existing menu item - only the provided fields change; omitted fields keep their current values. Use for renames, description edits, price changes (price_cents - FINANCIAL, confirm the new price), nutrition updates, or retiring an item (is_active=false). Day-level orderability is controlled by schedule_lunch_menu_item, not this tool. Use archive_restaurant_menu_item to remove the item permanently. Requires pac_cordinator or lunch_cordinator role. WRITE operation - confirm changes with the user. Get restaurant_id from list_school_restaurants and menu_item_id from list_restaurant_menu_items.

Parameters9

restaurant_id	string	required	Restaurant ID - from list_school_restaurants
menu_item_id	string	required	Menu item ID - from list_restaurant_menu_items
name	string	optional	New display name for the item
description	string	optional	New item description shown to parents
cost_cents	integer	optional	Kitchen cost in cents (internal margin tracking)
ingredients	array	optional	Ingredient list
calories	integer	optional	Calorie count
is_active	boolean	optional	Whether the item stays on the restaurant menu - set false to retire it
price_cents	integer	optional	Sale price in cents (e.g. 550 = $5.50)

Raw schema

{
  "type": "object",
  "properties": {
    "restaurant_id": {
      "type": "string",
      "description": "Restaurant ID - from list_school_restaurants"
    },
    "menu_item_id": {
      "type": "string",
      "description": "Menu item ID - from list_restaurant_menu_items"
    },
    "name": {
      "type": "string",
      "description": "New display name for the item"
    },
    "description": {
      "type": "string",
      "description": "New item description shown to parents"
    },
    "cost_cents": {
      "type": "integer",
      "description": "Kitchen cost in cents (internal margin tracking)"
    },
    "ingredients": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Ingredient list"
    },
    "calories": {
      "type": "integer",
      "description": "Calorie count"
    },
    "is_active": {
      "type": "boolean",
      "description": "Whether the item stays on the restaurant menu - set false to retire it"
    },
    "price_cents": {
      "type": "integer",
      "description": "Sale price in cents (e.g. 550 = $5.50)"
    }
  },
  "required": [
    "restaurant_id",
    "menu_item_id"
  ],
  "additionalProperties": false
}

archive_restaurant_menu_item

ADMIN: Archives (soft-deletes) a menu item so it can no longer be ordered - the item is removed from ordering but stays on historical orders. To retire it from the restaurant menu without archiving, use update_restaurant_menu_item with is_active=false. Requires pac_cordinator or lunch_cordinator role. DESTRUCTIVE operation - confirm with the user. Get restaurant_id from list_school_restaurants and menu_item_id from list_restaurant_menu_items.

Parameters2

restaurant_id	string	required	Restaurant ID - from list_school_restaurants
menu_item_id	string	required	Menu item ID - from list_restaurant_menu_items

Raw schema

{
  "type": "object",
  "properties": {
    "restaurant_id": {
      "type": "string",
      "description": "Restaurant ID - from list_school_restaurants"
    },
    "menu_item_id": {
      "type": "string",
      "description": "Menu item ID - from list_restaurant_menu_items"
    }
  },
  "required": [
    "restaurant_id",
    "menu_item_id"
  ],
  "additionalProperties": false
}

schedule_lunch_menu_item

ADMIN: Puts a restaurant menu item on the orderable menu for a given date, optionally capping portions. This only schedules the item - to retire it entirely use update_restaurant_menu_item (is_active) or archive_restaurant_menu_item. Requires pac_cordinator or lunch_cordinator role. WRITE - confirm with the user. Get IDs from list_school_restaurants and list_restaurant_menu_items.

Parameters4

restaurant_id	string	required	Restaurant ID - from list_school_restaurants
menu_item_id	string	required	Menu item ID - from list_restaurant_menu_items
menu_date	string	required	Date the item is orderable, YYYY-MM-DD
available_qty	integer	optional	Maximum portions for the day; omit for unlimited

Raw schema

{
  "type": "object",
  "properties": {
    "restaurant_id": {
      "type": "string",
      "description": "Restaurant ID - from list_school_restaurants"
    },
    "menu_item_id": {
      "type": "string",
      "description": "Menu item ID - from list_restaurant_menu_items"
    },
    "menu_date": {
      "type": "string",
      "description": "Date the item is orderable, YYYY-MM-DD"
    },
    "available_qty": {
      "type": "integer",
      "description": "Maximum portions for the day; omit for unlimited"
    }
  },
  "required": [
    "restaurant_id",
    "menu_item_id",
    "menu_date"
  ],
  "additionalProperties": false
}

README.md11 KBView on GitHub

Paxaver MCP Server

AI-facing adapter over the Paxaver school community platform. Implements the Model Context Protocol (MCP) on Cloudflare Workers with RS256 JWT validation, capability-first authorization, and Streamable HTTP transport.

What this is

The Paxaver MCP server lets AI assistants (ChatGPT, Claude, Perplexity, and any MCP-compatible client) act on behalf of a Paxaver user: check a lunch menu, order lunch, register for fundraising events, volunteer, and — for school administrators — manage restaurants, menu items, events, and daily orders.

It is a thin adapter. It contains no business logic and never touches the database, Stripe, or email directly. Every action is delegated to the private Paxaver backend API over a Cloudflare service binding (same region, no public network hop). The MCP server's only responsibilities are:

MCP protocol handling (JSON-RPC 2.0, Streamable HTTP)
RS256 JWT validation via JWKS from the centralized Paxaver auth worker
Per-tool capability policy and role gating
Sanitized, user-safe error mapping

Authentication is handled by the Paxaver auth worker (auth.paxaver.com), which serves as the OAuth 2.0 / OIDC authorization server. The MCP server validates the resulting RS256 JWTs and forwards them to the backend. The MCP server itself is not an authorization server.

Architecture

text

┌───────────────┐     MCP (Streamable HTTP)      ┌──────────────────────┐
│   AI Client   │ ─────────────────────────────▶ │   Paxaver MCP Worker │
│ ChatGPT/Claude│ ◀───────────────────────────── │  (this repo)         │
│  /Perplexity  │     RS256 JWT + JSON-RPC 2.0   │  Hono + jose         │
└───────────────┘                                └──────────┬───────────┘
                                                            │
                                          Cloudflare service binding
                                          (PAXAVER_API, same region)
                                                            │
                                                            ▼
                                                 ┌──────────────────────┐
                                                 │  Paxaver API Worker  │
                                                 │  (private backend)   │
                                                 │  D1 · Stripe · SES   │
                                                 └──────────────────────┘

The MCP worker never binds D1, Stripe, or SES. The service binding carries a short-lived JWT (120s TTL, audience paxaver-internal) that the backend trusts as an internal call while still attributing the action to the authenticated Paxaver user. See docs/architecture.md for the full picture.

Quick start

Install

bash

npm install @paxaver/mcp

Develop locally

bash

# 1. Install dependencies (Node >= 26.8.2)
npm install

# 2. Run the worker locally (Miniflare)
npm run dev

# 3. Typecheck, lint, and test
npm run typecheck
npm run lint
npm test

The local dev server starts on http://localhost:8787. Discovery endpoints live under /.well-known/; the MCP endpoint is POST /mcp.

Note: Local development without the PAXAVER_API_* service bindings falls back to authenticated HTTPS against API_BASE_URL_CA, API_BASE_URL_US, and API_BASE_URL_MX (default http://localhost:8787). For full integration testing, run the Paxaver backend worker locally; the defaults already point at it.

Deployment

Two environments, each a separate Worker with its own custom domain:

Environment	Worker name	Domain
`staging`	`paxaver-mcp-staging`	`mcp.paxaver.dev`
`production`	`paxaver-mcp`	`mcp.paxaver.com`

The production worker serves both CA and US users through a single endpoint (mcp.paxaver.com). User region is resolved from the JWT tenant_id claim, and the worker routes to the correct regional backend via service bindings (PAXAVER_API_CA, PAXAVER_API_US). Currency is determined by the user's school, not by the MCP endpoint.

Docker

The Dockerfile runs the worker locally via wrangler dev, proxying the production backends over HTTPS:

bash

docker build -t paxaver-mcp .
docker run -p 8787:8787 paxaver-mcp
# MCP endpoint: http://localhost:8787/mcp

bash

npm run deploy:staging   # wrangler deploy --env staging
npm run deploy:prod      # wrangler deploy --env production

The worker requires no secrets. See docs/deployment.md.

Tools

The server exposes 26 tools grouped into five categories. Visibility in tools/list is filtered by the caller's roles; every call is re-authorized before dispatch, and the backend re-checks data-level access (defense-in-depth).

Category	Tools
User / account	`get_my_context`, `get_my_wallet_balance`
Lunch ordering	`get_lunch_menu`, `list_my_lunch_orders`, `create_lunch_order_draft`, `update_lunch_order_draft`, `discard_lunch_order_draft`, `pay_lunch_order_draft`, `cancel_my_lunch_order`
Events & volunteering	`list_school_events`, `register_for_event`, `list_my_event_registrations`, `cancel_my_event_registration`, `list_my_volunteer_signups`, `sign_up_for_volunteer_shift`, `cancel_my_volunteer_signup`
Event administration	`create_school_event`, `update_school_event`, `cancel_school_event`
Restaurant / menu admin	`list_school_restaurants`, `create_school_restaurant`, `list_restaurant_menu_items`, `create_restaurant_menu_item`, `update_restaurant_menu_item`, `archive_restaurant_menu_item`, `schedule_lunch_menu_item`

Ordering is draft → review → payment: create_lunch_order_draft, adjust with update_lunch_order_draft, then pay_lunch_order_draft.

Compatibility: pre-2.5 tool names (get_menu, register_event, create_menu_item, …) still work — they resolve to the canonical tools — but are no longer advertised. order_lunch also remains callable for existing integrations. See docs/tools.md for the full legacy-name mapping.

Financial and destructive tools are labeled and require user confirmation. Full reference: docs/tools.md. Authorization policy: docs/authorization.md.

Privacy

No personal contact information (email, phone, address) is collected or returned through MCP tools. The get_my_context tool returns only the user's name, school, students, and roles. Student data is limited to IDs, names, and school slugs. Allergies, notes, birthday, and other PII are not exposed in read responses. The MCP server does not log user data.

Documentation

Document	Topic
docs/architecture.md	System architecture, service binding boundary, regional isolation
docs/authentication.md	JWT validation, JWKS, auth worker delegation, token format
docs/authorization.md	Capability policy table, role gating, defense-in-depth
docs/tools.md	Full tool reference with input schemas and classifications
docs/deployment.md	Wrangler config, environments, secrets, custom domains
docs/security.md	Security model, CORS, CSRF, error sanitization, headers
docs/compatibility.md	MCP protocol version, transports, supported AI clients
docs/migration.md	Migration from the legacy `mcp-server/` in the private monorepo
CHANGELOG.md	Release history
SECURITY.md	Vulnerability reporting policy
CONTRIBUTING.md	Development setup and contribution process

Tech stack

Runtime: Cloudflare Workers (compatibility_date: 2026-09-15)
Framework: Hono v4
JWT: jose v6 (RS256 via JWKS)
Protocol: MCP 2025-06-18, Streamable HTTP
Auth: RS256 JWT validation via centralized auth worker (auth.paxaver.com)
Build/deploy: Wrangler v4
Test: Vitest v2 (Workers pool + Node pool)

License

Install

Tools (26)

get_my_contextget_my_wallet_balancelist_my_lunch_ordersget_lunch_menucreate_lunch_order_draftpay_lunch_order_draftupdate_lunch_order_draftdiscard_lunch_order_draft

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://mcp.paxaver.com/mcp

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "paxaver-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://mcp.paxaver.com/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.

Paxaver MCP Adapter (io.github.Smartoire/paxaver-mcp)

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

get_my_context

get_my_wallet_balance

list_my_lunch_orders

get_lunch_menu

create_lunch_order_draft

pay_lunch_order_draft

update_lunch_order_draft

discard_lunch_order_draft

cancel_my_lunch_order

list_school_events

create_school_event

update_school_event

cancel_school_event

register_for_event

list_my_event_registrations

cancel_my_event_registration

list_my_volunteer_signups

cancel_my_volunteer_signup

sign_up_for_volunteer_shift

list_school_restaurants

create_school_restaurant

list_restaurant_menu_items

create_restaurant_menu_item

update_restaurant_menu_item

archive_restaurant_menu_item

schedule_lunch_menu_item

Paxaver MCP Server

What this is

Architecture

Quick start

Install

Develop locally

Deployment

Docker

Tools

Privacy

Documentation

Tech stack

License

Install

Remote endpoint

Related servers