Tock (exploretock.com): discover restaurants, search a city, get venue details and availability.
Tock (exploretock.com): discover restaurants, search a city, get venue details and availability.
tock-mcp is a well-architected MCP server for restaurant discovery via Tock. The codebase demonstrates strong security practices: authentication is delegated to a browser extension (fetchproxy), input validation is present on slug and date parameters, and sensitive user data (reservations, profile) is properly gated behind sign-in checks with appropriate error handling. Permissions are appropriately scoped to the server's purpose (HTTP requests, environment variables for config). Minor code quality observations exist but do not introduce security vulnerabilities. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.
7 files analyzed · 7 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-chrischall-tock-mcp": {
"args": [
"-y",
"tock-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
MCP server for Tock (exploretock.com) — restaurant discovery and availability for Claude. List cities, search a metro, and get a venue's details plus its bookable experiences, prices, party sizes, and open dates/times.
Every request is relayed through your own signed-in browser tab via the fetchproxy extension — no cookie paste, no bot-wall dance, no password handling. This project was developed and is maintained by AI (Claude Code).
Tock publishes no official consumer API, and exploretock.com sits behind a Cloudflare challenge. tock-mcp fetches the same server-rendered pages the Tock web app uses (parsing their embedded
window.$REDUX_STATEstore) through your signed-in tab. It is read-only — Tock reservations are prepaid tickets, so booking stays on exploretock.com. Use at your own discretion.
// .mcp.json
{
"mcpServers": {
"tock": { "command": "npx", "args": ["-y", "tock-mcp"] }
}
}
You also need the fetchproxy browser extension (shared across the fleet) running in a Chrome/Safari tab. The first tool call prints a one-time pair code to approve in the extension popup — run tock_healthcheck to trigger it. Discovery works signed-out; the account tools need you signed in to exploretock.com.
tock_list_metros — Tock cities/metros with business counts; filter by name/country.tock_search_restaurants — venues in a metro slug (cuisine, price, neighborhood, slug).tock_get_restaurant — venue details + its bookable experiences.tock_get_availability — a venue's bookable calendar (experiences, prices, open dates/times).tock_list_reservations / tock_get_profile — the signed-in user's purchases and profile.tock_healthcheck — bridge status + the one-time pair code.npm install
npm run build # tsc + esbuild bundle → dist/bundle.js
npm test # vitest
Architecture and the reverse-engineered Tock surface are documented in docs/TOCK-API.md.
MIT
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.