restaurant-ai-mcp
by stefanogebara
Overview
AI-powered restaurant management platform for no-show prevention, reservation handling, and operational analytics.
Installation
cd mcp-server && npm install && npm run build && node dist/index.jsEnvironment Variables
- AIRTABLE_API_KEY
- AIRTABLE_BASE_ID
- RESERVATIONS_TABLE_ID
- TABLES_TABLE_ID
- SERVICE_RECORDS_TABLE_ID
- SUBSCRIPTIONS_TABLE_ID
- CUSTOMER_HISTORY_TABLE_ID
- SUPABASE_URL
- SUPABASE_ANON_KEY
- SUPABASE_SERVICE_ROLE_KEY
- STRIPE_SECRET_KEY
- STRIPE_WEBHOOK_SECRET
- TWILIO_ACCOUNT_SID
- TWILIO_AUTH_TOKEN
- TWILIO_PHONE_NUMBER
- RESEND_API_KEY
- ELEVENLABS_API_KEY
- CARTESIA_API_KEY
- ML_ENDPOINT_URL
- VITE_API_URL
- VITE_SENTRY_DSN
- VITE_SUPABASE_URL
- VITE_SUPABASE_ANON_KEY
- VITE_ELEVENLABS_AGENT_ID
- VERCEL_URL
- GOOGLE_CLOUD_PROJECT
- VERTEX_AI_LOCATION
- GEMINI_API_KEY
- GEMINI_MODEL
- TWILIO_WHATSAPP_NUMBER
- TWILIO_TEMPLATE_RESERVATION_CONFIRMED
- TWILIO_TEMPLATE_RESERVATION_CANCELLED
- WHATSAPP_PHONE_NUMBER_ID
- WHATSAPP_ACCESS_TOKEN
- CENTRAL_SUPABASE_URL
- CENTRAL_SUPABASE_SERVICE_ROLE_KEY
- JWT_SECRET
Security Notes
The system utilizes extensive environment variables for API keys (Airtable, Stripe, Twilio, ElevenLabs, Supabase), relying heavily on secure environment setup. Production-readiness notes explicitly highlight missing authentication (JWT/session-based) and rate limiting on API endpoints, making it vulnerable if deployed without these critical additions. `subprocess.spawn` is used for external Python ML scripts and internal testing, which can be a risk if inputs are not strictly validated. Extensive reliance on third-party APIs (Stripe, Twilio, ElevenLabs, Vercel) introduces external attack surfaces. Input validation and CORS handling are present, but the lack of a default authentication layer is a significant concern.
Similar Servers
dewy-resort
A comprehensive hotel management system integrating with external services (Salesforce, Stripe, Twilio, Home Assistant) and an AI conversational agent (AWS Bedrock) for managing bookings, guest services, maintenance, and billing.
spring-ai-resos
AI-powered conversational interface for managing restaurant bookings, customers, orders, and feedback through tool invocation.
clicksend-mcp-server
Extends ClickSend's messaging capabilities into modern AI ecosystems, enabling AI agents to send SMS without custom code.
retell-mcp-server
A Node.js server that acts as a custom Minecraft server or proxy, allowing Minecraft clients to connect and interact using the Minecraft Protocol.