Servd Agentic Ordering
Server Details
Discover Servd venues, browse menus, validate carts, place confirmed orders, and track status.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
6 toolscheck_orderCheck order statusARead-onlyIdempotentInspect
Check payment and fulfillment state for an order created by place_order, or verify a signed sandbox simulation. The result intentionally omits diner contact, address, notes, and line items. Poll while state is awaiting_payment; stop when it becomes paid, preparing, ready, out_for_delivery, completed, cancelled, or expired.
| Name | Required | Description | Default |
|---|---|---|---|
| order_id | Yes | The machine-facing orderId from place_order. |
Output Schema
| Name | Required | Description |
|---|---|---|
| paid | Yes | |
| state | Yes | |
| total | Yes | Total in minor currency units. |
| venue | Yes | |
| status | Yes | |
| message | Yes | |
| orderId | Yes | |
| sandbox | Yes | |
| currency | Yes | |
| placedAt | Yes | |
| trackUrl | Yes | |
| expiresAt | Yes | |
| friendlyId | Yes | |
| orderNumber | Yes | |
| trackingUrl | Yes | |
| paymentMethod | Yes | |
| paymentStatus | Yes | |
| estimatedReadyMinutes | Yes | |
| createsProductionOrder | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds meaningful behavior beyond the readOnly/idempotent annotations: it discloses intentionally omitted fields (contact, address, notes, line items) and describes the state-driven polling contract. This gives the agent realistic expectations without contradicting annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The primary purpose and key polling instruction are front-loaded, and the omission disclosure is compact and useful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema exists, the description does not need to detail return fields. It covers purpose, source of order_id, polling lifecycle, and response omissions, making it complete for an agent to invoke this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the schema already describes order_id as the machine-facing orderId from place_order. The description reinforces that origin and adds the sandbox simulation use case, but it does not materially expand parameter meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('check') and resource ('payment and fulfillment state for an order created by place_order'), plus a secondary use case for signed sandbox simulations. This clearly distinguishes it from creation (place_order), lookup (get_venue), and validation (validate_cart) tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs when to poll ('while state is awaiting_payment') and when to stop by enumerating terminal states. It does not name alternatives or exclusions, but the sibling tools are clearly distinct and the polling guidance is concrete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_venuesFind Servd venuesARead-onlyIdempotentInspect
Find restaurants on Servd. Returns each venue’s slug, name and city — the slug is what every other tool needs. Pass query to filter by name or city.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | No | Optional name or city filter, case-insensitive. |
Output Schema
| Name | Required | Description |
|---|---|---|
| count | Yes | |
| venues | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover the read-only, idempotent, and non-destructive nature. The description adds useful behavioral context beyond that: it returns a summarized projection (slug, name, city) and that the slug is essential for other tools. It does not discuss pagination or limit behavior, but that is minor for this simple read operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler: the first front-loads the main purpose and return values, the second explains the key parameter. Every phrase adds value, including the note about slugs being needed downstream.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple, read-only listing tool with an output schema and safety annotations, the description is mostly complete. It could improve by mentioning the limit/pagination behavior or explicitly directing agents to get_venue for single-venue details, but these are not critical gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description reinforces the query parameter ('Pass query to filter by name or city'), but the schema already documents this. The limit parameter has no semantic description in either the schema or the tool description, leaving its purpose implicit despite having constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool finds restaurants/venues on Servd and returns a list of slugs, names, and cities. This distinguishes it from singular tools like get_venue, especially by emphasizing the slug as the key needed by every other tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is the tool to use when you need to discover venues and obtain slugs for downstream calls, saying 'the slug is what every other tool needs.' It gives clear context but does not explicitly state when not to use it or how it differs from get_venue.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_venueGet venue detailsARead-onlyIdempotentInspect
Get one venue’s opening hours, current open state, pickup and delivery availability, published policies, and available agent-order payment mode.
| Name | Required | Description | Default |
|---|---|---|---|
| slug | Yes | The venue slug. |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| url | Yes | |
| name | Yes | |
| slug | Yes | |
| Yes | ||
| hours | Yes | |
| phone | Yes | |
| rating | Yes | |
| address | Yes | |
| logoUrl | Yes | |
| openNow | Yes | |
| coverUrl | Yes | |
| currency | Yes | ISO 4217 currency code. |
| orderUrl | Yes | |
| policies | Yes | |
| timezone | Yes | |
| serviceModes | Yes | |
| agentOrdering | Yes | |
| acceptsReservations | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds context about the returned content (current open state, availability, policies, payment mode) but does not disclose behaviors such as not-found handling or data freshness. This is acceptable given the strong annotation coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that front-loads the action and subject, then lists data fields with no filler words. Every element earns its place, and it is easy to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has one required param, a documented schema, an output schema, and safe-read annotations. The description clearly states what data will be returned, so an agent has everything needed to invoke it correctly. No missing prerequisites or edge-case instructions are necessary for this simple read operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter, slug, is fully documented in the schema ('The venue slug.') with 100% schema description coverage. The description confirms the singular nature of the lookup but adds no new semantic detail beyond the schema, so the baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Get') and resource ('one venue') and enumerates the exact data returned: opening hours, current open state, pickup/delivery availability, policies, and payment mode. This clearly distinguishes it from siblings like find_venues (search) and get_menu (menu items), so an agent can confidently select this tool for venue-level details.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: it is for retrieving details for exactly one venue, identified by slug. It does not explicitly state when not to use it or mention alternatives like find_venues, but the singular scope and field list make the primary use case unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
place_orderPlace confirmed restaurant orderADestructiveIdempotentInspect
Create a REAL restaurant order only after showing the latest validate_cart result and receiving explicit diner confirmation. A venue explicitly marked agentOrdering.sandbox instead returns a no-charge, no-kitchen simulation with sandbox=true and createsProductionOrder=false. Pass that result’s confirmation.token so the server can prove the cart and live quote did not change. The server recalculates all prices. Use a unique idempotency key, show orderNumber and the labeled customerLinks, and poll check_order for payment and fulfillment status. Unpaid online orders expire after 30 minutes.
| Name | Required | Description | Default |
|---|---|---|---|
| slug | Yes | The venue slug returned by find_venues. | |
| items | No | ||
| combos | No | ||
| customer | Yes | The diner’s minimum contact details required by the venue. | |
| delivery | No | For delivery, street is required and coordinates may be needed for fees/radius. | |
| confirmed | Yes | Set true only after the diner explicitly confirms the latest validate_cart result. | |
| tip_amount | No | Major currency units. | |
| fulfillment | Yes | ||
| payment_method | No | online | |
| idempotency_key | Yes | Use validate_cart.confirmation.idempotencyKey exactly; reuse it for retries of this confirmed order. | |
| confirmation_token | Yes | The short-lived confirmation.token from the exact validate_cart result shown to the diner. |
Output Schema
| Name | Required | Description |
|---|---|---|
| message | Yes | |
| orderId | Yes | Machine-facing private id for check_order. |
| sandbox | Yes | |
| trackUrl | Yes | |
| expiresAt | Yes | |
| statusUrl | Yes | |
| friendlyId | Yes | |
| paymentUrl | Yes | |
| checkoutUrl | Yes | |
| orderNumber | Yes | Customer-facing order number. |
| paymentMode | Yes | |
| trackingUrl | Yes | |
| paymentError | Yes | |
| customerLinks | Yes | |
| paymentProvider | Yes | |
| paymentRequired | Yes | |
| createsProductionOrder | Yes | False for reviewer sandbox receipts. True only when a production order was created. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as non-read-only, idempotent, and potentially destructive, and the description adds meaningful context: server-side price recalculation, no-charge sandbox behavior, 30-minute expiration for unpaid online orders, and the need to surface orderNumber and customerLinks. There is no contradiction with the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence carries essential operational information, and the most important instruction is front-loaded: only place the order after showing latest validation and receiving confirmation. Though dense, it is not wasteful and earns its length given the tool's side effects.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a high-stakes order-placement tool with 11 parameters, nested objects, idempotency requirements, and real-world consequences, the description covers preconditions, sandbox behavior, token validity, price recalculation, result display, polling, and expiration. An agent has enough context to invoke it correctly and safely.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is moderate at 64%, so the description must add value for the critical parameters. It explains why confirmation_token and idempotency_key matter, clarifies that prices are server-recalculated, and describes sandbox implications. Some parameters like fulfillment and payment_method are left to the schema, but the key workflow-critical semantics are covered.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific, unambiguous action — 'Create a REAL restaurant order' — and clearly differentiates this from validation/checking by naming validate_cart and check_order. The term 'REAL' signals that this is the side-effecting placement step, distinct from cart validation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit preconditions: show the latest validate_cart result, obtain explicit diner confirmation, and pass the confirmation token. It also describes the sandbox simulation alternative and explicitly instructs polling check_order afterward, giving the agent a complete workflow.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_cartValidate and price cartARead-onlyIdempotentInspect
Validate a proposed cart and calculate authoritative lines, discounts, fees, tax and total without creating an order. Call this immediately before asking the diner to confirm. Send only the minimum diner contact and fulfillment data required for this order.
| Name | Required | Description | Default |
|---|---|---|---|
| slug | Yes | The venue slug returned by find_venues. | |
| items | No | ||
| combos | No | ||
| customer | No | ||
| delivery | No | ||
| tip_amount | No | Major currency units. | |
| fulfillment | Yes | ||
| payment_method | No | online |
Output Schema
| Name | Required | Description |
|---|---|---|
| lines | Yes | |
| valid | Yes | |
| venue | Yes | |
| totals | Yes | |
| fulfillment | Yes | |
| paymentMode | Yes | |
| confirmation | Yes | |
| createsOrder | Yes | |
| requirements | Yes | |
| paymentMethod | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already carry readOnlyHint=true and destructiveHint=false, so the safety profile is covered. The description adds useful behavioral context: no order is created, and the pricing is authoritative (server recalculated). However, it doesn't disclose behavior on invalid carts or failures, though the output schema may cover that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core purpose, and no wasted words. The timing instruction and data minimization guidance are packed efficiently into the second sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with rich input and output schemas plus strong annotations, the description covers the essential purpose, non-mutating behavior, and call timing. It could add a brief note about validation failure behavior, but given the output schema exists, the description is substantially complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 25%, so the description carries more responsibility for parameter meaning. It does add some guidance by saying to send only minimum contact and fulfillment data, but it does not explain key parameters like items, combos, customer, delivery, or payment_method. This leaves a significant semantic gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('validate'), a specific resource ('proposed cart'), and the exact scope: calculating lines, discounts, fees, tax, and total. It also explicitly distinguishes itself from order creation ('without creating an order'), which separates it clearly from place_order.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives a clear, explicit invocation context: 'Call this immediately before asking the diner to confirm.' This tells the agent when to use it. It doesn't explicitly name alternatives or exclusions, but the 'without creating an order' phrasing implies the key distinction from place_order.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
6 tool updates
- First observed
check_order - First observed
find_venues - First observed
get_menu - First observed
get_venue - First observed
place_order - First observed
validate_cart
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Order food from Cordering white-label restaurants: browse menus, confirm, then place an order.
Discover local services and availability, then create, track, reschedule, or cancel bookings.
AI-native restaurant discovery: verified/menu-indexed/discovered tiers + signed allergy-safety data.
Search local businesses and book, order, quote or message any of them from one connection.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables simulating customer orders from a dummy restaurant menu and tracking their status in real-time via RESTful APIs.-
- FlicenseNot gradedqualityDmaintenanceEnables users to search restaurants, view menus, place orders, and check order status via a local MCP server using Firestore.2-
- FlicenseNot gradedqualityFmaintenanceEnables interacting with Sharebite's corporate food ordering platform to browse group orders, search restaurants, view menus, and place orders.4-
- AlicenseAqualityCmaintenanceAn unofficial Model Context Protocol server for the efood.gr consumer app API that lets you discover restaurants, browse menus, build a cart, and place real orders on efood.gr.12MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Each tool targets a distinct step in the ordering workflow: venue discovery, venue details, menu retrieval, cart validation, order placement, and order status checking. Even find_venues and get_venue are clearly separated by list/search versus single-venue detail.
All tool names follow a consistent lowercase verb_noun pattern: find_venues, get_venue, get_menu, validate_cart, place_order, check_order. The verbs are distinct yet predictable, and there is no mixing of casing or naming styles.
Six tools is well-scoped for an agentic ordering server. Each tool supports a necessary phase of the ordering flow without redundancy or unnecessary bulk.
The core ordering lifecycle is covered: discover venues, inspect venue details, fetch menus, validate carts, place orders, and poll order status. The main gap is the lack of a cancel_order or update_order tool, so order management after placement is limited.