io.github.chrischall/opentable-mcp
NPM · OPENTABLE-MCP · SCANNED SEP 21
OpenTable reservation management: find slots, book, cancel, list reservations, manage favorites.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 3 of 19 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to chrischall/opentable-mcp). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 0 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability58
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3832 tokens (~273/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
- Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage90
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 70% of tool parameters carry a description.Partial
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "opentable_remove_favorite" implies "remove" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the io.github.chrischall/opentable-mcp server?
io.github.chrischall/opentable-mcp runs locally as an npm package, launched with npx -y opentable-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · opentable-mcp
claude mcp add chrischall-opentable-mcp -- npx -y opentable-mcp
{
"mcpServers": {
"chrischall-opentable-mcp": {
"command": "npx",
"args": [
"-y",
"opentable-mcp"
]
}
}
} {
"servers": {
"chrischall-opentable-mcp": {
"command": "npx",
"args": [
"-y",
"opentable-mcp"
]
}
}
} codex mcp add chrischall-opentable-mcp -- npx -y opentable-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"chrischall-opentable-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"opentable-mcp"
],
"enabled": true
}
}
} openclaw mcp add chrischall-opentable-mcp --command npx --arg -y --arg opentable-mcp
mcp_servers:
chrischall-opentable-mcp:
command: "npx"
args: ["-y", "opentable-mcp"] {
"McpServers": {
"chrischall-opentable-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"opentable-mcp"
]
}
}
} assistant mcp add chrischall-opentable-mcp -t stdio -c npx -a -y opentable-mcp
{
"mcpServers": {
"chrischall-opentable-mcp": {
"command": "npx",
"args": [
"-y",
"opentable-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 21 Sept 26 +1
- Package version: 1.1.0 → 1.1.2 functional
- 20 Sept 26 +11
- Known CVEs: unverified → pass ▲ security
- Dependency health: unverified → 0.96 ▲ functional
- MCP protocol: Implements a current MCP spec version (2026-07-28). functional
- Package version: 1.0.0 → 1.1.0 functional
- 19 Sept 26 −10
- Stability: 0.87 → unverified ▼ security
- Known CVEs: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Dependency health: 0.86 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
- Package version: 0.19.5 → 1.0.0 functional
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 +12
- Malware scan: unverified → pass ▲ security
- Stability: pass → 0.80 functional
- 15 Sept 26 +11
- Malware scan: unverified → pass ▲ security
- Known CVEs: unverified → pass ▲ security
- Stability: 0.97 → pass security
- Security disclosure: pass → unverified ▼ functional
- Dependency health: unverified → 0.86 ▲ functional
- Package version: 0.19.4 → 0.19.5 functional
- 14 Sept 26 −25
- Stability: 0.93 → unverified ▼ security
- Malware scan: pass → unverified ▼ security
- Known CVEs: pass → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Capabilities: pass → unverified ▼ functional
- Dependency health: 0.86 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
- Package version: 0.19.3 → 0.19.4 functional
- Package version: 0.16.3 → 0.19.3 functional
- 13 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 21 Sept 2026 · Analysed npm/opentable-mcp@1.1.2
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | chrischall/opentable-mcp |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/chrischall/opentable-mcp/.github/workflows/release-please.yml@refs/heads/main |
| Rekor log index | 2904960974 |
| Predicate type | https://slsa.dev/provenance/v1 |
| Subject digest | sha512:41d8e8a5c0d7ccc612bb5178a8dd169839a6a805391f6101f4ad05bd7a2472a4551082150478c8ce569f0377ed4cc99f171f599125a2752ed1484095c |
Background: How many MCP packages publish verified provenance →
Dependencies 19 packages
| Packages resolved | 19 |
|---|---|
| Stale | 3 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
opentable_add_favorite ~29
Add a restaurant to the user's Saved Restaurants list.
| Name | Type | Req | Description |
|---|---|---|---|
| restaurant_id | integer | yes | – |
No output schema declared.
No examples provided.
opentable_book ~615
Book an OpenTable reservation. Requires a fresh slot_hash + reservation_token from opentable_find_slots (tokens expire within minutes — call find_slots just before book). dining_area_id is OPTIONAL: when omitted it's auto-resolved to the default dining area from OpenTable's booking-details page, so find_slots → book works without a separate opentable_get_restaurant call. For CC-required slots (prime-time at busy restaurants), opentable_book refuses without a `booking_token` from opentable_book_preview — the preview step surfaces the cancellation policy and the saved card that would be held. Auto-fetches the user's profile (name/email/phone) from /user/dining-dashboard. Returns confirmation_number + security_token; save both — they're required to cancel. For Listing-type restaurants there's no slot to lock — callers should check `opentable_get_restaurant.bookable` first and surface the restaurant's phone/URL instead. Without confirm:true this returns a dry-run and makes NO booking; re-run with confirm:true to commit.
| Name | Type | Req | Description |
|---|---|---|---|
| booking_token | string | – | Opaque token from opentable_book_preview. REQUIRED for CC-required slots (book will refuse otherwise). Optional for standard slots — when present, skips a redundant re-lock. |
| confirm | boolean | – | Must be true to proceed. Without this, the tool returns a preview. |
| database_region | string | – | OpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —… |
| date | string | yes | YYYY-MM-DD |
| dining_area_id | integer | – | Optional dining-area (room) id. When omitted, auto-resolved to the default dining area from the booking-details page — no opentable_get_restaurant call needed. Pass explicitly only to pin a specific… |
| experience_id | integer | – | Tamper-check signal for Experience tokens. When set, must match the experienceId baked into the booking_token by preview — agents that re-state the experience choice here get refused if it drifted fr… |
| experience_ids | array | – | Pass-through from find_slots.experience_ids. When non-empty, book refuses without a booking_token from opentable_book_preview. |
| party_size | integer | yes | – |
| reservation_token | string | yes | slot_availability_token from opentable_find_slots |
| restaurant_id | integer | yes | – |
| slot_hash | string | yes | slot_hash from opentable_find_slots |
| time | string | yes | HH:MM (24h) — must match the slot returned by find_slots |
No output schema declared.
No examples provided.
opentable_book_preview ~521
Preview an OpenTable booking BEFORE committing. Fetches the /booking/details SSR page and the slot-lock to surface: the cancellation policy (including any credit-card no-show fee), the saved payment card that would be charged/held, and a short-lived `booking_token` that opentable_book consumes. REQUIRED for CC-required slots — opentable_book refuses to commit without the token. Safe to call for standard slots too (the token skips a redundant re-lock in book). Holds the slot for ~60-90s; preview → book should happen within a minute. For Listing-type restaurants (Le Bernardin, etc.) this tool can't fetch a slot at all — callers should check `opentable_get_restaurant.bookable` first and surface the restaurant's phone/URL instead. For Experience-mandatory slots (find_slots returned booking_type=experience_mandatory), pass `experience_id` from the slot's `experience_ids` to route through the Experience slot-lock.
| Name | Type | Req | Description |
|---|---|---|---|
| database_region | string | – | OpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —… |
| date | string | yes | YYYY-MM-DD |
| dining_area_id | integer | – | Optional dining-area (room) id. When omitted, auto-resolved to the default dining area from OpenTable's booking-details page — so you can go straight from find_slots to book without calling opentable… |
| experience_id | integer | – | For Experience-mandatory slots: which experience to book (from slot.experience_ids). Required when find_slots returned an Experience slot. |
| experience_ids | array | – | Pass-through from find_slots.experience_ids. When non-empty, experience_id must also be set. |
| party_size | integer | yes | – |
| reservation_token | string | yes | slot_availability_token from opentable_find_slots |
| restaurant_id | integer | yes | – |
| slot_hash | string | yes | slot_hash from opentable_find_slots |
| time | string | yes | HH:MM (24h) — must match a slot returned by find_slots |
No output schema declared.
No examples provided.
opentable_cancel ~221
Cancel an OpenTable reservation. Requires restaurant_id, confirmation_number, and security_token — all three come from opentable_list_reservations or opentable_book. Without confirm:true this returns a dry-run and takes NO cancellation action; re-run with confirm:true to cancel the reservation.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true to proceed. Without this, the tool returns a preview. |
| confirmation_number | integer | yes | – |
| database_region | string | – | OpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —… |
| restaurant_id | integer | yes | – |
| security_token | string | yes | – |
No output schema declared.
No examples provided.
opentable_find_slots ~428
List available reservation slots at a specific OpenTable restaurant for a date + party size. Returns each slot's reservation_token (use it with opentable_book — tokens expire quickly, book promptly). Slots may be attributes=['default'|'bar'|'highTop'|'outdoor'] and type=Standard|Experience|POP. You can pass a slot's reservation_token + slot_hash straight to opentable_book without a separate opentable_get_restaurant call — book auto-resolves the dining area. (OpenTable's availability response carries only the seating category, not the numeric dining-area id, so that id is resolved at book time from the booking-details page.) If this errors with "operation ... not yet observed on this tab", open any OpenTable restaurant page in your browser once (the graphql bridge needs to see the page's own availability query fire first), then retry.
| Name | Type | Req | Description |
|---|---|---|---|
| database_region | string | – | OpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —… |
| date | string | yes | YYYY-MM-DD |
| party_size | integer | yes | – |
| restaurant_id | integer | yes | – |
| time | string | yes | HH:MM (24h) — anchor time; slots come back relative to this |
| view | string | – | Response shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"… |
No output schema declared.
No examples provided.
opentable_get_profile ~128
Get the authenticated OpenTable user's profile: name, email, phones, loyalty points and tier, home metro, member-since date. Payment and credit-card details are never exposed.
| Name | Type | Req | Description |
|---|---|---|---|
| view | string | – | Response shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"… |
No output schema declared.
No examples provided.
opentable_get_restaurant ~270
Get full details for a single OpenTable restaurant: cuisine, price band, description, address, hours, phone, payment options, features, rating/review count, and availability_token (used internally when booking). Accepts the numeric restaurant_id, a slug, a path, or the full URL from opentable_search_restaurants — passing the search result's "url" verbatim always resolves, including legacy venues served at /{slug} instead of /r/{slug}.
| Name | Type | Req | Description |
|---|---|---|---|
| restaurant_id | – | yes | Numeric restaurant_id (as returned by opentable_list_reservations / opentable_list_favorites), slug ("state-of-confusion-charlotte"), path, or full URL from opentable_search_restaurants. Passing the… |
| view | string | – | Response shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"… |
No output schema declared.
No examples provided.
opentable_healthcheck Verify the fetchproxy bridge end-to-end ~122
Round-trips a small public www.opentable.com URL (/robots.txt) through the fetchproxy bridge and returns diagnostics: the bridge's role (host/peer/null), port, version, the extension link (linked / pair pending / not attached / never answered), the elapsed round-trip time, and a plain-English hint distinguishing 'bridge never came up' from 'extension not connected' from 'real www.opentable.com-side problem'. Read-only, no auth required. Call this when a real tool fails and you want to know which hop broke.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
opentable_list_favorites ~128
List the user's saved restaurants from OpenTable (Saved Restaurants list). Returns each entry's id, name, cuisine, neighborhood, price band, rating, and OpenTable URL.
| Name | Type | Req | Description |
|---|---|---|---|
| view | string | – | Response shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"… |
No output schema declared.
No examples provided.
opentable_list_reservations ~138
List the authenticated user's OpenTable reservations. Defaults to upcoming; pass scope="past" or scope="all" to broaden. Each entry includes the security_token needed to cancel or modify.
| Name | Type | Req | Description |
|---|---|---|---|
| scope | string | – | – |
| view | string | – | Response shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"… |
No output schema declared.
No examples provided.
opentable_modify ~427
Modify an existing OpenTable reservation in place. Requires the existing reservation's identity (restaurant_id + confirmation_number + security_token) plus a fresh modify_token from opentable_modify_preview — preview is mandatory because the new slot's cancellation policy / CC re-hold can differ from the original. Submits /dapi/booking/make-reservation with isModify: true + the existing confirmation_number + security_token; OpenTable preserves confirmation_number across modifies but may regenerate reservation_id and security_token. dining_area_id is OPTIONAL — the modify_token already carries the area opentable_modify_preview resolved; pass it only to restate it (mismatch is refused). Returns the same shape as opentable_book plus was_modified: true so the agent can phrase the user confirmation accurately. For Listing-type restaurants there's no slot to lock — agents should check opentable_get_restaurant.bookable first. Without confirm:true this returns a dry-run and makes NO change to the reservation; re-run with confirm:true to submit the modification.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | – | Must be true to proceed. Without this, the tool returns a preview. |
| confirmation_number | integer | yes | – |
| date | string | yes | YYYY-MM-DD (the NEW date) |
| dining_area_id | integer | – | Optional. The modify_token carries the dining area preview resolved; when restated here it must match the token. |
| experience_id | integer | – | Optional tamper-check signal. When set, must match the experienceId baked into modify_token. |
| modify_token | string | – | REQUIRED. From opentable_modify_preview. No no-token path — the new slot's policy + CC re-hold can differ from the original. |
| party_size | integer | yes | – |
| reservation_token | string | yes | slot_availability_token from opentable_find_slots for the NEW slot |
| restaurant_id | integer | yes | – |
| security_token | string | yes | – |
| slot_hash | string | yes | slot_hash from opentable_find_slots for the NEW slot |
| time | string | yes | HH:MM (24h) — the NEW time |
No output schema declared.
No examples provided.
opentable_modify_preview ~500
Preview a MODIFICATION to an existing OpenTable reservation. Takes the existing reservation's identity (restaurant_id + confirmation_number + security_token from opentable_list_reservations or the original opentable_book result) plus the NEW slot args (from a fresh opentable_find_slots call) and returns the new cancellation_policy, CC re-hold details, and a `modify_token` that opentable_modify consumes. Mirrors opentable_book_preview, but the /booking/details URL includes confirmationNumber + securityToken + isModify=true so OpenTable's SSR returns the modify state. dining_area_id is OPTIONAL — omitted, it's auto-resolved from the booking-details page like book_preview does. REQUIRED before opentable_modify — no shortcut path. For Listing-type restaurants the modify can't proceed (no slot picker); check opentable_get_restaurant.bookable first.
| Name | Type | Req | Description |
|---|---|---|---|
| confirmation_number | integer | yes | – |
| database_region | string | – | OpenTable's sharded-database region for the restaurant. Defaults to 'NA' (North America). Pass the venue's region (e.g. for UK/EU/APAC restaurants) when booking or cancelling outside North America —… |
| date | string | yes | YYYY-MM-DD (the NEW date) |
| dining_area_id | integer | – | Optional dining-area (room) id for the NEW slot. When omitted, auto-resolved to the default dining area from OpenTable's booking-details page — the same resolution opentable_book_preview uses. Pass e… |
| experience_id | integer | – | For Experience-mandatory slots; required when the new slot has experience_ids. |
| experience_ids | array | – | Pass-through from find_slots.experience_ids. When non-empty, experience_id must also be set. |
| party_size | integer | yes | – |
| reservation_token | string | yes | slot_availability_token from opentable_find_slots for the NEW slot |
| restaurant_id | integer | yes | – |
| security_token | string | yes | – |
| slot_hash | string | yes | slot_hash from opentable_find_slots for the NEW slot |
| time | string | yes | HH:MM (24h) — the NEW time |
No output schema declared.
No examples provided.
opentable_remove_favorite ~29
Remove a restaurant from the user's Saved Restaurants list.
| Name | Type | Req | Description |
|---|---|---|---|
| restaurant_id | integer | yes | – |
No output schema declared.
No examples provided.
opentable_search_restaurants ~276
Search OpenTable for restaurants. Returns matching restaurants with cuisine, neighborhood, price band, rating, description, and URL. Does NOT include bookable slot tokens — use opentable_find_slots for a specific venue to check availability.
| Name | Type | Req | Description |
|---|---|---|---|
| date | string | – | YYYY-MM-DD. Affects search ranking but not returned slots. |
| latitude | number | – | – |
| location | string | – | City / neighborhood / address — appended to the term. Prefer lat/lng when precise. |
| longitude | number | – | – |
| metro_id | integer | – | OpenTable metro id (e.g. 8 = SF Bay Area, 31 = Charlotte). |
| party_size | integer | – | Number of guests. Default 2. |
| term | string | – | Free-text query (cuisine or restaurant name) |
| time | string | – | HH:MM (24h). Default 19:00 when date is set. |
| view | string | – | Response shape: "compact" (default) drops fields the response already carries elsewhere; "full" returns every field this server understands. compact strips image/avatar URLs from the response; "full"… |
No output schema declared.
No examples provided.
What is the io.github.chrischall/opentable-mcp server?
io.github.chrischall/opentable-mcp is listed in the public MCP registry as io.github.chrischall/opentable-mcp. OpenTable reservation management: find slots, book, cancel, list reservations, manage favorites. This page covers its npm package (opentable-mcp).
Is the io.github.chrischall/opentable-mcp server safe to use?
io.github.chrischall/opentable-mcp scores 90 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 21 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.chrischall/opentable-mcp server expose?
io.github.chrischall/opentable-mcp exposes 14 tools: opentable_list_reservations, opentable_find_slots, opentable_book_preview, opentable_modify_preview, opentable_book, and 9 more. Their descriptions and schemas cost roughly 3,832 tokens of context every time the server is loaded.
Is the io.github.chrischall/opentable-mcp server still maintained?
io.github.chrischall/opentable-mcp is still listed as active in the MCP registry. We last reached this channel on 21 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.chrischall/opentable-mcp server under?
io.github.chrischall/opentable-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.